{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"debug","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"error","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"debug","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:11:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"error","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"debug","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:11:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60772","PortSpecifier":{"PortValue":60772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60772","PortSpecifier":{"PortValue":60772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":810100596},"http":{"id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4165b7-e342-4b6e-aa76-7ebf2655a388","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45208","PortSpecifier":{"PortValue":45208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":860845582},"http":{"id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e291ad-a3a2-44e4-a0ce-e56d1288268d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200320,"nanos":904243715},"http":{"id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74221ccb-1df6-473f-8e77-f5f6d768d9f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60792","PortSpecifier":{"PortValue":60792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60792","PortSpecifier":{"PortValue":60792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200321,"nanos":968636951},"http":{"id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c30482f-1035-4a8f-92e7-b4f943f7e7fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f875706-2351-431f-a668-a9d2a8c08cfe","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200323,"nanos":14040237},"http":{"id":"0f875706-2351-431f-a668-a9d2a8c08cfe","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kups1SQeTofoy3u4_Xpz5O6nLqVuP3Erl3jYzNmVyGT7wQbG1NsVXbOjcJ24\"}"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","subscription":"e2e-rate-iso-a-890505","tenant":"e2e-shared-a-046938","userId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-890505\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890505"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be56ec46-6b8f-41ba-a093-710a2f9234a1","keyName":"e2e-rate-a-890505","selected_subscription":"e2e-rate-iso-a-890505","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-890505@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890505","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f875706-2351-431f-a668-a9d2a8c08cfe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55456","PortSpecifier":{"PortValue":55456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55456","PortSpecifier":{"PortValue":55456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":833593919},"http":{"id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bab8892-ea3a-4014-a8ae-ca16e2db1b77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56088","PortSpecifier":{"PortValue":56088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":884791727},"http":{"id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b7dc8838-3885-4ee3-82ba-12584be37061","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"]}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/68690ea66534"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=647d4cfe-ca1a-44a3-85de-933cba269270"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b7dc8838-3885-4ee3-82ba-12584be37061","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fc1b86-ead9-4d58-9f50-0ef80a0fdab5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55464","PortSpecifier":{"PortValue":55464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55464","PortSpecifier":{"PortValue":55464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200333,"nanos":925050836},"http":{"id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5802abbd-e5fe-904f-b9b2-0cbb138d10f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e51fae87-5426-49e1-9ed3-51c494242027","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200334,"nanos":967989633},"http":{"id":"e51fae87-5426-49e1-9ed3-51c494242027","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e51fae87-5426-49e1-9ed3-51c494242027","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e51fae87-5426-49e1-9ed3-51c494242027","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e51fae87-5426-49e1-9ed3-51c494242027","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e51fae87-5426-49e1-9ed3-51c494242027","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","method":"POST","path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions","host":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55476","PortSpecifier":{"PortValue":55476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200336,"nanos":11371760},"http":{"id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","method":"POST","headers":{":authority":"e2e-shared-a-046938.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-046938/rate-test-model-046938/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kOuX1rvpwpm1oAxi_j3QHZYuFoq01HehLz10paqaOgDhHetmXAQJwmWUU4NL\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","subscription":"e2e-rate-iso-a-29d84e","tenant":"e2e-shared-a-046938","userId":"094153d2-0b37-4487-bda6-ace12e85d7af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\",\"requestedSubscription\":\"e2e-rate-iso-a-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-046938.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-046938/rate-test-model-046938\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-046938/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"094153d2-0b37-4487-bda6-ace12e85d7af","keyName":"e2e-rate-a-29d84e","selected_subscription":"e2e-rate-iso-a-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-a-046938/e2e-rate-iso-a-29d84e@ai-tenant-e2e-shared-a-046938/rate-test-model-046938","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-046938","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29d84e","namespace":"ai-tenant-e2e-shared-a-046938","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1674980-f6dd-44a7-ba66-64c5b80abc55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","method":"POST","path":"/ai-tenant-e2e-shared-b-307109/rate-test-model-307109/v1/completions","host":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56090","PortSpecifier":{"PortValue":56090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784200336,"nanos":47909655},"http":{"id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","method":"POST","headers":{":authority":"e2e-shared-b-307109.apps.cf949761-da55-47d8-bbff-68690ea66534.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-307109/rate-test-model-307109/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u6uDjmbGIycXc8lq_9MYHkxVtyGgTsIJ0Oyo5OEUuZByQuXt3lgidAQ2ogc8"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u6uDjmbGIycXc8lq_9MYHkxVtyGgTsIJ0Oyo5OEUuZByQuXt3lgidAQ2ogc8\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7726542-9886-4ab2-af08-da98ffb7919f","keyName":"e2e-rate-b-29d84e","subscription":"e2e-rate-iso-b-29d84e","tenant":"e2e-shared-b-307109","userId":"a7726542-9886-4ab2-af08-da98ffb7919f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\",\"requestedSubscription\":\"e2e-rate-iso-b-29d84e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-307109.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-307109","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29d84e","namespace":"ai-tenant-e2e-shared-b-307109","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-307109/rate-test-model-307109\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-307109/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-29d84e"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a7726542-9886-4ab2-af08-da98ffb7919f","keyName":"e2e-rate-b-29d84e","selected_subscription":"e2e-rate-iso-b-29d84e","selected_subscription_key":"ai-tenant-e2e-shared-b-307109/e2e-rate-iso-b-29d84e@ai-tenant-e2e-shared-b-307109/rate-test-model-307109","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-307109","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-29d84e","namespace":"ai-tenant-e2e-shared-b-307109","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:12:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4ec9f2-1470-43d0-bac8-c6ea95b03431","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ccb6c968896d79ccd64035b3ebc90b1c331c57b9cfa117072a26f7941034ac7"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2f3e1f83dc1d2bd556d4bb1863717675dd1d6bc2da0ffa42c44bbcad7a8f29"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/927a9855b1812319f320e816a7508efe385566f499aeac95e02e51623a458f55"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3629a6a83163dea2fd37202bb8fce1902b74d91f2c11b1bbaa9703921ba207"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45a878ffb0a9f934c07277ee3480cc22781d39104ddb10db9947f2be8635fbe"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db8d036fe66051fa617dd2c80adb1eb4ce8acc173e48f86bf858018589bf09f4"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a327c9536b1d23a3ad33b7b0c9b7276e265ed5b30e68ea2f1330299438128317"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bcd237b8f47bee0c165993e0755c8c9d6ebfd9dfe3d046c56406c91184e2a2f"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/743be4c771aa222fd15eab9e1741722e12434e600b1e809700111beefa5798ea"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e43c54b3370edc076bac273fef696fc85644a6c8c112a715a709e1ded2f95f5c"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4af2c88d679758fda9287b82c01fe407d1aab2738567df19ed20c2a7cd419135"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec7d6c64db8089c47072f5ce769502a843a609e23665cdca74da2134e2bc0f9b"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a2685f4038cba8f80bf7d21d7ff016f88eb8d5ff4fbba627cea9400e7ca3fb"}
{"level":"info","ts":"2026-07-16T11:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eca812c9c7e7bd40e5c5cedd62612630ac47cb92ecb522ca003da537d65a3bf"}
{"level":"info","ts":"2026-07-16T11:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ca2d8bb9611b69473556b05cf6ba6f94c67198cef5a71516cff78b4e2b8a26f"}
{"level":"info","ts":"2026-07-16T11:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dffb4e8a7339fca756efce7aac65b3cd6ddf076951144c2d6572211743859a00"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932a89c140086de86a5b197667f3be13959e87e3fb5ba5c27967df002b622dc7"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457d958e2ddd8dd6822d862dd2ff7c87c28a9a7d8e8ee91aaf174e25d8b8622b"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86e7e320f883911ef84cc75a3cac11aa86c9b000ed387eae75b2ac12213084f5"}
{"level":"info","ts":"2026-07-16T11:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce2cd4533d4c626ea7d4be56dec7f64228f2f65c5dc00d0833c5207d6339e23"}
{"level":"info","ts":"2026-07-16T11:13:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d7a5f05db4518c6562a3b5c1de0f7a4202825d75e28b77082c4925ef37e16bf"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c380fd5fc6c224d05d894b5a36c2ac0519672a0a8b2939c7d3f547c45a996ea7"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/881029913dbb757f80abb9eac04a81c292a668a26e5b24db68f90537f99cae87"}
{"level":"info","ts":"2026-07-16T11:13:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e5a231d6fcce168c9e77b20d4d5d5f9ff198c3f206ab947d9dae324b040dd60"}