{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"}
{"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59586","PortSpecifier":{"PortValue":59586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59586","PortSpecifier":{"PortValue":59586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":72943619},"http":{"id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c80922-01c1-4e10-8064-3e9543d30195","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":112950760},"http":{"id":"c3c80922-01c1-4e10-8064-3e9543d30195","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59602","PortSpecifier":{"PortValue":59602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59602","PortSpecifier":{"PortValue":59602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":159803046},"http":{"id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59606","PortSpecifier":{"PortValue":59606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0166dce3-dada-47af-ae9d-e80f1486e133","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59606","PortSpecifier":{"PortValue":59606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370743,"nanos":222548773},"http":{"id":"0166dce3-dada-47af-ae9d-e80f1486e133","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370744,"nanos":260553598},"http":{"id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":97146180},"http":{"id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":136335776},"http":{"id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":175377826},"http":{"id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370756,"nanos":211722309},"http":{"id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47649ed3-170d-4787-8340-7be1301bbd5d","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370757,"nanos":249655428},"http":{"id":"47649ed3-170d-4787-8340-7be1301bbd5d","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56122","PortSpecifier":{"PortValue":56122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","method":"POST","path":"/ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c/v1/completions","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56122","PortSpecifier":{"PortValue":56122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370757,"nanos":286926451},"http":{"id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YpMpF8RCDiC57tVC_nlj2qkjgGlRRMZuVVANCeae39DUPKxE37GG117e9bku"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YpMpF8RCDiC57tVC_nlj2qkjgGlRRMZuVVANCeae39DUPKxE37GG117e9bku\"}"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d50756c-7361-4a54-b77a-15aeaee9525b","keyName":"e2e-rate-b-0f66d5","subscription":"e2e-rate-iso-b-0f66d5","tenant":"e2e-shared-b-67755c","userId":"0d50756c-7361-4a54-b77a-15aeaee9525b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\",\"requestedSubscription\":\"e2e-rate-iso-b-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67755c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0f66d5","namespace":"ai-tenant-e2e-shared-b-67755c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0f66d5"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d50756c-7361-4a54-b77a-15aeaee9525b","keyName":"e2e-rate-b-0f66d5","selected_subscription":"e2e-rate-iso-b-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-b-67755c/e2e-rate-iso-b-0f66d5@ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67755c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0f66d5","namespace":"ai-tenant-e2e-shared-b-67755c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"}
{"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"}
{"level":"info","ts":"2026-07-06T20:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"}
{"level":"info","ts":"2026-07-06T20:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}