{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35ae869ed7c4145c735f46aa96a8e45d693574e2165eb10471b64058cee067e8"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"error","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a31f81fca1f5720b65014044d5ad2c93b4821b704f6012640b43dcfec64c28"}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:28:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/099c5e394fa5614191e65235786ca30a380cfe65ffbf51bd5ab62d21cd8c274b"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a40f7ee84eaa57073c89f03802d8f51318bc2409c187aade233fb906797cc686"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba583af69e06504b8ebb4dca3d6845b21ffaa05aa4a5ec024d413d3da3647788"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf5f8421db1ac7452a4a39ed76c6e3ef99a7bbf0ed8348ed476c14a651712c18"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b2d3b3a0a48c9efaea0381c180b9f086fe99d98c059a23eafabfc5c561ffb5"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2d5aa1e3e1014662dd38d720dc7a3d69f62e19066486fa535a0bb4a4f441aa1"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4095340fbb3db0e88e38b9c87920c4f26d4cc0824268049db410885b9bce32"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbb7b86d92cfbefa3d8c02f6ace160a24c8f53d4165ce2488e21d4c1af3b4337"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/987e735fb4408b1c8a76a059f9d737b3267d6ca5091bbcb34805ceb85cd4451d"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62ef5f516e376474d27a044b82790a86f29e8137854be6ae1e141bf309912069"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f366f260f1201eb503a5fb333e44726cb32cebf5efbe4352eb3d460e0cfa1dac"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bd3e5339a5830f9096d93462f4ca06dd57c945e39c7c842580b46d949c45b5"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53be5c17621127ef89614fc498723624c5ddee55aa76a2934a9958f026e90b06"}
{"level":"info","ts":"2026-07-07T00:28:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edf3861d6f7e5007c5e988ae4e09512d55b9688aba2e9f52c38febbeaea0c36"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"error","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:29:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b21643-2257-497a-898d-76bd8cf71615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43738","PortSpecifier":{"PortValue":43738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2b21643-2257-497a-898d-76bd8cf71615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b21643-2257-497a-898d-76bd8cf71615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43738","PortSpecifier":{"PortValue":43738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":10478430},"http":{"id":"f2b21643-2257-497a-898d-76bd8cf71615","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2b21643-2257-497a-898d-76bd8cf71615","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2b21643-2257-497a-898d-76bd8cf71615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b21643-2257-497a-898d-76bd8cf71615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b21643-2257-497a-898d-76bd8cf71615","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:60082","PortSpecifier":{"PortValue":60082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:60082","PortSpecifier":{"PortValue":60082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":50262986},"http":{"id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96fe6990-8ee6-4b27-830c-0894ab5eb7b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c53b694-e9eb-4345-96da-a94614c0739b","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43750","PortSpecifier":{"PortValue":43750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384174,"nanos":96611768},"http":{"id":"0c53b694-e9eb-4345-96da-a94614c0739b","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c53b694-e9eb-4345-96da-a94614c0739b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43764","PortSpecifier":{"PortValue":43764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"127eaef2-493e-400e-abd0-35c60f3b068a","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43764","PortSpecifier":{"PortValue":43764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384175,"nanos":152278983},"http":{"id":"127eaef2-493e-400e-abd0-35c60f3b068a","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"127eaef2-493e-400e-abd0-35c60f3b068a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fac81b-d760-43da-be48-87b731492e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43778","PortSpecifier":{"PortValue":43778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6fac81b-d760-43da-be48-87b731492e30","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6fac81b-d760-43da-be48-87b731492e30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:43778","PortSpecifier":{"PortValue":43778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384176,"nanos":191596770},"http":{"id":"d6fac81b-d760-43da-be48-87b731492e30","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HEASoPHa3guLDV4_JPPZr2lYPY9KhFvXVL70qy4BrhIwSaR9aLnp16ydMLy\"}"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","subscription":"e2e-rate-iso-a-220723","tenant":"e2e-shared-a-fced7e","userId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-220723\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6fac81b-d760-43da-be48-87b731492e30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-220723"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6fac81b-d760-43da-be48-87b731492e30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ff0a07a-ab1a-45a8-b8ae-9b9a89756f4e","keyName":"e2e-rate-a-220723","selected_subscription":"e2e-rate-iso-a-220723","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-220723@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-220723","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fac81b-d760-43da-be48-87b731492e30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6fac81b-d760-43da-be48-87b731492e30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88521582-7076-4425-8118-1a035fe29264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58854","PortSpecifier":{"PortValue":58854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88521582-7076-4425-8118-1a035fe29264","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88521582-7076-4425-8118-1a035fe29264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58854","PortSpecifier":{"PortValue":58854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":133359489},"http":{"id":"88521582-7076-4425-8118-1a035fe29264","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88521582-7076-4425-8118-1a035fe29264","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88521582-7076-4425-8118-1a035fe29264","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88521582-7076-4425-8118-1a035fe29264","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88521582-7076-4425-8118-1a035fe29264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88521582-7076-4425-8118-1a035fe29264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35568","PortSpecifier":{"PortValue":35568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35568","PortSpecifier":{"PortValue":35568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":204059183},"http":{"id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"]}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9792ae7f92d9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3ee6d9f-9320-450e-8247-39311f102af9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9f5fda3b-5d30-4e0f-9dd2-cda3f21e9ce1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae74c278-79df-4cc3-ad16-931f0bd4caa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58864","PortSpecifier":{"PortValue":58864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b0886fc-e026-9509-8827-b1038d032bf0","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58864","PortSpecifier":{"PortValue":58864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384187,"nanos":243743171},"http":{"id":"4b0886fc-e026-9509-8827-b1038d032bf0","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b0886fc-e026-9509-8827-b1038d032bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14e32ade-5d04-45f2-a932-cb81d7d47614","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384188,"nanos":292284322},"http":{"id":"14e32ade-5d04-45f2-a932-cb81d7d47614","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14e32ade-5d04-45f2-a932-cb81d7d47614","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342fcfae-b516-49de-860d-48b00716262e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342fcfae-b516-49de-860d-48b00716262e","method":"POST","path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions","host":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342fcfae-b516-49de-860d-48b00716262e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384189,"nanos":335738142},"http":{"id":"342fcfae-b516-49de-860d-48b00716262e","method":"POST","headers":{":authority":"e2e-shared-a-fced7e.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"342fcfae-b516-49de-860d-48b00716262e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14mjDchEYGfb1pYp9_P3dVa0gTNvliU5sIqqDF7ZOqSTpCenPTSXtSuFA40QJ\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","subscription":"e2e-rate-iso-a-08013f","tenant":"e2e-shared-a-fced7e","userId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"342fcfae-b516-49de-860d-48b00716262e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\",\"requestedSubscription\":\"e2e-rate-iso-a-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fced7e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342fcfae-b516-49de-860d-48b00716262e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342fcfae-b516-49de-860d-48b00716262e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"10c000dd-a98b-4d8a-ac86-55dad4b974d1","keyName":"e2e-rate-a-08013f","selected_subscription":"e2e-rate-iso-a-08013f","selected_subscription_key":"ai-tenant-e2e-shared-a-fced7e/e2e-rate-iso-a-08013f@ai-tenant-e2e-shared-a-fced7e/rate-test-model-fced7e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fced7e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-08013f","namespace":"ai-tenant-e2e-shared-a-fced7e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342fcfae-b516-49de-860d-48b00716262e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342fcfae-b516-49de-860d-48b00716262e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35572","PortSpecifier":{"PortValue":35572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1abce75-95a4-4149-b15e-2d57b69f5934","method":"POST","path":"/ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9/v1/completions","host":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:35572","PortSpecifier":{"PortValue":35572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384189,"nanos":372860951},"http":{"id":"f1abce75-95a4-4149-b15e-2d57b69f5934","method":"POST","headers":{":authority":"e2e-shared-b-accfb9.apps.286e4454-c27d-44b0-a9e1-9792ae7f92d9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8yzv9UrkWTdQQzaQ_VISe2m1jlVHL77XtaM9M0oOUEZIasmyqO9WMe2EHKu8"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8yzv9UrkWTdQQzaQ_VISe2m1jlVHL77XtaM9M0oOUEZIasmyqO9WMe2EHKu8\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","keyName":"e2e-rate-b-08013f","subscription":"e2e-rate-iso-b-08013f","tenant":"e2e-shared-b-accfb9","userId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\",\"requestedSubscription\":\"e2e-rate-iso-b-08013f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-accfb9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-accfb9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-08013f","namespace":"ai-tenant-e2e-shared-b-accfb9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-08013f"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"14523adf-fd85-47d0-aae6-ca7a88e853c4","keyName":"e2e-rate-b-08013f","selected_subscription":"e2e-rate-iso-b-08013f","selected_subscription_key":"ai-tenant-e2e-shared-b-accfb9/e2e-rate-iso-b-08013f@ai-tenant-e2e-shared-b-accfb9/rate-test-model-accfb9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-accfb9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-08013f","namespace":"ai-tenant-e2e-shared-b-accfb9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:29:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1abce75-95a4-4149-b15e-2d57b69f5934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21bfb7f9b24bff63303f8a7b56aaf21b62dfa81d3bb1fb5d948e773f123dc432"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636b393bdac504fb894543685e21b2f33fd67e33ccccb99a05af342588f1b34d"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00352fad17f5463ce09ed4ead1e9ce5fc6353604c85e895deafdd1acd3f47c12"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd991a923edcfebb6610483defdfea96353ec9e0e372ebdbb489d16dab29991b"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae5e68c92c6ad04b27b74497a53f39ed1c6dfdd7a0db7749c0688fcb25f58a47"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34248104b083d4a0125cf31aa9d2c43b2858fa7c31cc137ea0d14ad300a5c6ba"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e67c127264659e7509ef4095c87eb5cb28dea3cf3aceeef0dad012bc153afd44"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ae92a93399c1aa3d41a57916c1c257b077e200e0a7abf42854e905812fdb4e"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f311a45683e04792b98adecbbbd489ae6432a395ba481b4bf7ec707b6ccc56"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62db4aaa6b68df75d611bfac821cb1ef86732fba9f188ff95e229ce6f50500b0"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c0f0bac5141744c75b78135ff8f3d26088f88fe77e3e1c8f169d2aba7e6b94"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818255e186320f70e41d6766698262e3b90e33fc063984924457f82002bbaa65"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2c971a5b20c5debca8a732ccd7075e2e629a25df42100d13d2076dcf79c380"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e44486a8610dfa04a8a01b5e6f6c6ef1a667587410412866e4ccb77b430e58c"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a38712c37419f8007a86b17220514c62dfcf7bf8b4e9f8253c9058496399f47f"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827a405e4de9ac8a577e2cf1749cd33dd4af02532ea9d1cd043a709dce891a1c"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a5416b3c8a8bfadc3629970bf1882e3a14edb3ea886f61f735e1b3559be61a"}
{"level":"info","ts":"2026-07-07T00:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b406f54fabaf699c484f24646b638def00ada51506a1375d20321928c0d9a1"}
{"level":"info","ts":"2026-07-07T00:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5f867f684772a30a395f2076d444c5b8a2f99f403c8396c824a0d24eac5be1d"}
{"level":"info","ts":"2026-07-07T00:30:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7d24845d9197592c7d6e691fd7fd65de8742130d1909dc5ba0edc7b82fb3b81"}