--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"info","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516"}
{"level":"debug","ts":"2026-07-13T22:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e"}
{"level":"debug","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:33:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"debug","ts":"2026-07-13T22:33:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a"}
{"level":"error","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4"}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57566","PortSpecifier":{"PortValue":57566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"946a4206-4285-4e7a-9913-4bc09cae2257","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57566","PortSpecifier":{"PortValue":57566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783981992,"nanos":185742728},"http":{"id":"946a4206-4285-4e7a-9913-4bc09cae2257","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"946a4206-4285-4e7a-9913-4bc09cae2257","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"693e081d-fa5e-4763-b7d2-61175c51bbda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58182","PortSpecifier":{"PortValue":58182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783981992,"nanos":244080189},"http":{"id":"693e081d-fa5e-4763-b7d2-61175c51bbda","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693e081d-fa5e-4763-b7d2-61175c51bbda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57570","PortSpecifier":{"PortValue":57570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","method":"GET","path":"/maas-api/v1/api-keys/cbb28c73-96bd-402e-9790-640afad5c484","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57570","PortSpecifier":{"PortValue":57570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783981992,"nanos":301685100},"http":{"id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","method":"GET","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cbb28c73-96bd-402e-9790-640afad5c484",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cbb28c73-96bd-402e-9790-640afad5c484",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaf6622a-eeb1-438b-b195-76f8ea089b27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58184","PortSpecifier":{"PortValue":58184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","method":"GET","path":"/maas-api/v1/api-keys/69830e15-bfdd-4b6f-b9f4-fa8a299a2d3c","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58184","PortSpecifier":{"PortValue":58184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783981992,"nanos":338458102},"http":{"id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","method":"GET","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/69830e15-bfdd-4b6f-b9f4-fa8a299a2d3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/69830e15-bfdd-4b6f-b9f4-fa8a299a2d3c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24ea5fa-e3db-40bb-91bf-a29f96e723b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26812c12-5583-435e-a3da-50f2509b4d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56676","PortSpecifier":{"PortValue":56676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26812c12-5583-435e-a3da-50f2509b4d10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26812c12-5583-435e-a3da-50f2509b4d10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56676","PortSpecifier":{"PortValue":56676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982009,"nanos":391834679},"http":{"id":"26812c12-5583-435e-a3da-50f2509b4d10","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26812c12-5583-435e-a3da-50f2509b4d10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26812c12-5583-435e-a3da-50f2509b4d10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26812c12-5583-435e-a3da-50f2509b4d10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26812c12-5583-435e-a3da-50f2509b4d10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26812c12-5583-435e-a3da-50f2509b4d10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65836971-af17-4c0f-b749-60effa31c85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58704","PortSpecifier":{"PortValue":58704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65836971-af17-4c0f-b749-60effa31c85e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65836971-af17-4c0f-b749-60effa31c85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58704","PortSpecifier":{"PortValue":58704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982009,"nanos":428994924},"http":{"id":"65836971-af17-4c0f-b749-60effa31c85e","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65836971-af17-4c0f-b749-60effa31c85e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65836971-af17-4c0f-b749-60effa31c85e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65836971-af17-4c0f-b749-60effa31c85e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65836971-af17-4c0f-b749-60effa31c85e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65836971-af17-4c0f-b749-60effa31c85e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56678","PortSpecifier":{"PortValue":56678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56678","PortSpecifier":{"PortValue":56678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982009,"nanos":462946513},"http":{"id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","method":"GET","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BB7rV1oiUo3qtj0s_RcINtso82UyQOBcSq9EFFBdGf8YfHnXjY4ulIARqnrL"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BB7rV1oiUo3qtj0s_RcINtso82UyQOBcSq9EFFBdGf8YfHnXjY4ulIARqnrL\"}"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48355d2e-a7d4-425f-92f4-0e473ea60df1","keyName":"e2e-auth-iso-a-8b6df8","subscription":"e2e-auth-iso-83a7b0","tenant":"e2e-shared-a-0eaefd","userId":"48355d2e-a7d4-425f-92f4-0e473ea60df1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-83a7b0"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d911616a-b3e6-4c57-84a4-5663c90fd4b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43154","PortSpecifier":{"PortValue":43154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43154","PortSpecifier":{"PortValue":43154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982028,"nanos":681149309},"http":{"id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f074d708-12d4-49b9-8f9a-8fdfb494bece","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85bb6cca-356c-4744-816a-ba51d171f4fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982028,"nanos":715620453},"http":{"id":"85bb6cca-356c-4744-816a-ba51d171f4fe","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85bb6cca-356c-4744-816a-ba51d171f4fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48562607-4ae6-432c-901d-d049833ea521","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44964","PortSpecifier":{"PortValue":44964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48562607-4ae6-432c-901d-d049833ea521","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48562607-4ae6-432c-901d-d049833ea521","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44964","PortSpecifier":{"PortValue":44964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982028,"nanos":749748554},"http":{"id":"48562607-4ae6-432c-901d-d049833ea521","method":"GET","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48562607-4ae6-432c-901d-d049833ea521","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zu1KcE3qMq9nhtWt_7Msvx6VUiv2a56WX3c5Rt3uqXfVN03eZNffLfCDYj0L"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48562607-4ae6-432c-901d-d049833ea521","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zu1KcE3qMq9nhtWt_7Msvx6VUiv2a56WX3c5Rt3uqXfVN03eZNffLfCDYj0L\"}"}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48562607-4ae6-432c-901d-d049833ea521","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48562607-4ae6-432c-901d-d049833ea521","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"48562607-4ae6-432c-901d-d049833ea521","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48562607-4ae6-432c-901d-d049833ea521","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T22:33:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48562607-4ae6-432c-901d-d049833ea521","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982045,"nanos":829279829},"http":{"id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f281373e-32b6-462a-b3aa-ce85c9bf8c48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40200","PortSpecifier":{"PortValue":40200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40200","PortSpecifier":{"PortValue":40200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982045,"nanos":865146263},"http":{"id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46b0ddf5-ba85-4877-8d66-b998c325ca2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41108","PortSpecifier":{"PortValue":41108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0850974-c40f-4ab6-8a75-75bd2229754e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41108","PortSpecifier":{"PortValue":41108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982045,"nanos":904625262},"http":{"id":"b0850974-c40f-4ab6-8a75-75bd2229754e","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0850974-c40f-4ab6-8a75-75bd2229754e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"901fb453-883a-4acb-8743-037bfbfae31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"901fb453-883a-4acb-8743-037bfbfae31a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"901fb453-883a-4acb-8743-037bfbfae31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982045,"nanos":941764283},"http":{"id":"901fb453-883a-4acb-8743-037bfbfae31a","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"901fb453-883a-4acb-8743-037bfbfae31a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"901fb453-883a-4acb-8743-037bfbfae31a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"901fb453-883a-4acb-8743-037bfbfae31a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"901fb453-883a-4acb-8743-037bfbfae31a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"901fb453-883a-4acb-8743-037bfbfae31a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f546e01f-3983-4476-825f-6bbee6fa7e48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982063,"nanos":88211251},"http":{"id":"f546e01f-3983-4476-825f-6bbee6fa7e48","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f546e01f-3983-4476-825f-6bbee6fa7e48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fec283e-2aff-4f59-800e-817be209db37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35238","PortSpecifier":{"PortValue":35238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fec283e-2aff-4f59-800e-817be209db37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fec283e-2aff-4f59-800e-817be209db37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35238","PortSpecifier":{"PortValue":35238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982063,"nanos":120059821},"http":{"id":"6fec283e-2aff-4f59-800e-817be209db37","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fec283e-2aff-4f59-800e-817be209db37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fec283e-2aff-4f59-800e-817be209db37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fec283e-2aff-4f59-800e-817be209db37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fec283e-2aff-4f59-800e-817be209db37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fec283e-2aff-4f59-800e-817be209db37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35248","PortSpecifier":{"PortValue":35248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d48a4a6b-e9d9-49de-8db1-5762de201605","method":"GET","path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35248","PortSpecifier":{"PortValue":35248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982063,"nanos":157167317},"http":{"id":"d48a4a6b-e9d9-49de-8db1-5762de201605","method":"GET","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d48a4a6b-e9d9-49de-8db1-5762de201605","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50370","PortSpecifier":{"PortValue":50370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","method":"GET","path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50370","PortSpecifier":{"PortValue":50370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982063,"nanos":185243203},"http":{"id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","method":"GET","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81df19ef-2166-45b8-b207-7c66a8a8d2f4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63855cd3-8d17-45c0-87e2-0a2f1a327cd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49482","PortSpecifier":{"PortValue":49482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49482","PortSpecifier":{"PortValue":49482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982080,"nanos":241671449},"http":{"id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94879c6c-f39d-46d5-b58b-f0ab576c7736","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55786","PortSpecifier":{"PortValue":55786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55786","PortSpecifier":{"PortValue":55786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982080,"nanos":278397235},"http":{"id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/auth-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06fb7d8b-2760-45d4-a6ba-9cd827e3c884","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49486","PortSpecifier":{"PortValue":49486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49486","PortSpecifier":{"PortValue":49486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982080,"nanos":310523307},"http":{"id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gn0Zc4PLVAIhqDgb_11wLw0w36IdikG23zSWmKsvNAhJRoKV0fqePVSPlG27"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gn0Zc4PLVAIhqDgb_11wLw0w36IdikG23zSWmKsvNAhJRoKV0fqePVSPlG27\"}"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"837c5e1e-4fc6-4201-8a99-a7a28a5b49f4","keyName":"e2e-auth-iso-a-9dd0cc","subscription":"e2e-auth-iso-9650c6","tenant":"e2e-shared-a-0eaefd","userId":"837c5e1e-4fc6-4201-8a99-a7a28a5b49f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/auth-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9650c6"}
{"level":"info","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cd2e0d-5bbe-4908-ae0d-ab3ec65aa057","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34748ab6ac3c0127fa0b7c3d228b83e0281456784c14fe986a07e36f269935ec"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7b835caa3334a943ee8af5c857f56c218875f2ebe9ed6f189a19d894483e530"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ad174182bedbfcf9bb9e0a8da826e3efc861c374dbb4d763041f8ad778a7446"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d537e507b9c9d54ae45f4adb8848323bde1d44294270de3a496ed9d4f9f516"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71bb23c6df27a9b0a6c692ba5bc103c46ffaa0abf7d6b13f2e6e873ef3e991c4"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfc72e4fd6793c43f70a59963e96ac45e2fbc4734513ec2908effc6f299e0677"}
{"level":"info","ts":"2026-07-13T22:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/042401eff7ede470439af5e9609959c3ac21d61fd890bfb10e170a48bcd13105"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d08328240c091f16068d6ebe94227d6df3ee0fbc74c47712e3676fb44d44744e"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b13df2a748cd90a342bd45e31d4627ed38e90245c764f37d118cf71cb45c952d"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af2c491db24bfdc52b0c717e2d456bf9bc5b4a7efb09d9657426fbd76e0b1c1a"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/189b673210b550dbdc5798eb57041051a4230e62af0be7f39a0918a1aaf1f954"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f97dfa30e73e433aa2c80f49f30754d3196909bfe4e139ee800575f895388dd"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d58a8258d587f7a939d2c38f33660b0ec8da36c123fd0668fae41f42ae1f17c"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8cecfb0cb7d846b44e19ff4e239ff569eb8759899936ce849dfb1201cf2e611"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2ef746513b976301c8c307ae4cc53bac13d7c891562d33d1228bb97b86995a"}
{"level":"info","ts":"2026-07-13T22:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df8e2bcd2329d804df54550cbf89b9f0a1862e83b0463ff3d70322b4eba3549e"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"error","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"info","ts":"2026-07-13T22:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"940615382ccf8b12900b45ea48d0210269f30a70ff90c64c3c64ccb504e32fc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/940615382ccf8b12900b45ea48d0210269f30a70ff90c64c3c64ccb504e32fc8"}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac"}
{"level":"info","ts":"2026-07-13T22:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"}
{"level":"debug","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"info","ts":"2026-07-13T22:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11897539-5789-45a5-a9fc-a28e70de45da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11897539-5789-45a5-a9fc-a28e70de45da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11897539-5789-45a5-a9fc-a28e70de45da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48800","PortSpecifier":{"PortValue":48800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982149,"nanos":35576380},"http":{"id":"11897539-5789-45a5-a9fc-a28e70de45da","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11897539-5789-45a5-a9fc-a28e70de45da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11897539-5789-45a5-a9fc-a28e70de45da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/sub-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11897539-5789-45a5-a9fc-a28e70de45da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11897539-5789-45a5-a9fc-a28e70de45da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11897539-5789-45a5-a9fc-a28e70de45da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33994","PortSpecifier":{"PortValue":33994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3357d972-fc8e-476c-87b9-3c0135f2f530","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33994","PortSpecifier":{"PortValue":33994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982149,"nanos":74698949},"http":{"id":"3357d972-fc8e-476c-87b9-3c0135f2f530","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/sub-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3357d972-fc8e-476c-87b9-3c0135f2f530","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48814","PortSpecifier":{"PortValue":48814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48814","PortSpecifier":{"PortValue":48814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982149,"nanos":114328209},"http":{"id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","method":"GET","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dfgpWtyJ0SO0h2RX_X0b0zbcFFGNCFNimIoa4NNHXNzRGghmm0duYJ5X1RIE"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dfgpWtyJ0SO0h2RX_X0b0zbcFFGNCFNimIoa4NNHXNzRGghmm0duYJ5X1RIE\"}"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd3a9cb0-09ac-4212-bb7c-6849d27feeb6","keyName":"e2e-sub-iso-1c331c","subscription":"e2e-a-only-36e798","tenant":"e2e-shared-a-0eaefd","userId":"dd3a9cb0-09ac-4212-bb7c-6849d27feeb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/sub-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-36e798"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a1fac15-6493-43ac-9191-92f80cc3d8c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2796ea13-d004-4919-9c2e-aa8dd7659921","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982149,"nanos":155199992},"http":{"id":"2796ea13-d004-4919-9c2e-aa8dd7659921","method":"GET","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ez8m4oa2CkZgEsp_mAtxbRSSZmktpYcwcLlNhtoIcNgRgfIQcVTy4SVDYT0"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ez8m4oa2CkZgEsp_mAtxbRSSZmktpYcwcLlNhtoIcNgRgfIQcVTy4SVDYT0\"}"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30427099-16c4-492d-96be-5b3700433fd5","keyName":"e2e-sub-iso-0bd11e","subscription":"e2e-b-only-36e798","tenant":"e2e-shared-b-4b5279","userId":"30427099-16c4-492d-96be-5b3700433fd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/sub-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-36e798"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2796ea13-d004-4919-9c2e-aa8dd7659921","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48512","PortSpecifier":{"PortValue":48512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1996c2-811b-4074-b2c7-38e751d54da2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48512","PortSpecifier":{"PortValue":48512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982159,"nanos":150952041},"http":{"id":"fa1996c2-811b-4074-b2c7-38e751d54da2","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/sub-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1996c2-811b-4074-b2c7-38e751d54da2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36822","PortSpecifier":{"PortValue":36822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36822","PortSpecifier":{"PortValue":36822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982159,"nanos":187354849},"http":{"id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/sub-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ebeae84-a0e9-41e7-b1e6-c82726c97f1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48518","PortSpecifier":{"PortValue":48518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48518","PortSpecifier":{"PortValue":48518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982159,"nanos":224663505},"http":{"id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PRT7fbYbdvzao3w6_2DHymupO7aPJPpsAVCpslCA7cxqQNPfdsyvahxaHpSJ"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PRT7fbYbdvzao3w6_2DHymupO7aPJPpsAVCpslCA7cxqQNPfdsyvahxaHpSJ\"}"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63984b1a-489c-459e-8e3b-e43fc68a5ad7","keyName":"e2e-sub-iso-cbc2f8","subscription":"e2e-shared-sub-52ecd3","tenant":"e2e-shared-a-0eaefd","userId":"63984b1a-489c-459e-8e3b-e43fc68a5ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/sub-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-52ecd3"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c65d2bf8-27f3-4084-ab59-0af9bcc7f755","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36830","PortSpecifier":{"PortValue":36830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36830","PortSpecifier":{"PortValue":36830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982159,"nanos":255414664},"http":{"id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HphgOOx41tmcor4x_2p6fKGXi4dJYSHctI90W6ncbweu0W0T5HngkkQBsVaf"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HphgOOx41tmcor4x_2p6fKGXi4dJYSHctI90W6ncbweu0W0T5HngkkQBsVaf\"}"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01749cf2-d9a6-4b8b-a8ea-01f984c14a02","keyName":"e2e-sub-iso-14722c","subscription":"e2e-shared-sub-52ecd3","tenant":"e2e-shared-b-4b5279","userId":"01749cf2-d9a6-4b8b-a8ea-01f984c14a02","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/sub-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-52ecd3"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89ac7089-b44e-4300-ba1a-995c4e9bf3d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faf86ec7643ad6cd32548b3fd90071f367dd991e48503c8df7ce6d4f2875711d"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29584103b8d4ab76319f752d62fcf6787646efdcddf11456309354b9ba7b5b84"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a32687f4661603c595e04ab1bcbf1ff21edfb27ee4bb2758e2126e2e1be8547"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cc05f6e57089c4af8bca9cc7dc8d5ba7a5732051cb66c0c24c5c8fc32d52aa6"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdd344eb95ad9bd5b6b26998773930f99f92c4df60444584e314f2c6dfbcc778"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e72a10da97af2877470cddbe474dd33c5936a0ac257e7be2e644df019d5dd8ac"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a344318b8ec2a91209ed05c5e0c0b6c7c19ba68df87837ec84b0066ecb54e7ca"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36070654470d3bcc955d73d540bbf233a4dea5215b878dd48971822fa5319add"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bf423af5b0a6e3ff1618e631796c981785c11464489c0cee93d30d99391d05d"}
{"level":"info","ts":"2026-07-13T22:36:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ec8f70ce30a6a4817ee65499bb869220c291776632d2a3affb825ae5ce5e70"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6aa1d7f81f484814d7df2c80dc9a7085fbabddb438430c4e8fcba69b29b17b2"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98117151c92d142dc5fd21b62996d6f399e9529755de3edaacee021d6246c7b1"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e772fc979c65bc249743a1b14e19e7ec328024d6fc3130869bec70c31d636512"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47aac3abd99badf89fca35b4a2028e9ee6c6a5af02d913a299821dc31c168625"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a2ccd3339098f8b4cf6dd9e1844c4623c1979bc245b480e940f0d1aea8ff7d"}
{"level":"info","ts":"2026-07-13T22:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1ebfcf3ab3bf21ee40b577dc130436e985398f4cd7686e217fbbab7e7207bd4"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"}
{"level":"error","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"error","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"}
{"level":"debug","ts":"2026-07-13T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"debug","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"940615382ccf8b12900b45ea48d0210269f30a70ff90c64c3c64ccb504e32fc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/940615382ccf8b12900b45ea48d0210269f30a70ff90c64c3c64ccb504e32fc8"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"debug","ts":"2026-07-13T22:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T22:37:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T22:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50858","PortSpecifier":{"PortValue":50858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982237,"nanos":984485518},"http":{"id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de29b99-b1cb-45d1-a04b-fe743f6068d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52682","PortSpecifier":{"PortValue":52682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52682","PortSpecifier":{"PortValue":52682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982238,"nanos":26667266},"http":{"id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37f8ecae-bc1f-479d-a93a-f39562b6dada","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50862","PortSpecifier":{"PortValue":50862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2e4648-4830-4920-8e75-30a764ef40e6","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50862","PortSpecifier":{"PortValue":50862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982238,"nanos":62527261},"http":{"id":"5b2e4648-4830-4920-8e75-30a764ef40e6","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2e4648-4830-4920-8e75-30a764ef40e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501f1614-eb86-4303-8b97-f006f760bafc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50864","PortSpecifier":{"PortValue":50864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"501f1614-eb86-4303-8b97-f006f760bafc","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501f1614-eb86-4303-8b97-f006f760bafc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50864","PortSpecifier":{"PortValue":50864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982239,"nanos":125399638},"http":{"id":"501f1614-eb86-4303-8b97-f006f760bafc","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"501f1614-eb86-4303-8b97-f006f760bafc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501f1614-eb86-4303-8b97-f006f760bafc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501f1614-eb86-4303-8b97-f006f760bafc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501f1614-eb86-4303-8b97-f006f760bafc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50876","PortSpecifier":{"PortValue":50876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50876","PortSpecifier":{"PortValue":50876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982240,"nanos":165794011},"http":{"id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e683839-df2e-49ae-ab0d-96f0c4bd6592","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50878","PortSpecifier":{"PortValue":50878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50878","PortSpecifier":{"PortValue":50878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982241,"nanos":202753548},"http":{"id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"102d14d3-b8ca-47db-a7d9-211b34fc5fe7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50884","PortSpecifier":{"PortValue":50884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1282dca8-7b1a-4972-8321-a86da1c10d86","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50884","PortSpecifier":{"PortValue":50884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982242,"nanos":240863451},"http":{"id":"1282dca8-7b1a-4972-8321-a86da1c10d86","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1282dca8-7b1a-4972-8321-a86da1c10d86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50886","PortSpecifier":{"PortValue":50886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56a516f7-9603-481c-abc8-05d8d8d33d52","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50886","PortSpecifier":{"PortValue":50886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982243,"nanos":279805741},"http":{"id":"56a516f7-9603-481c-abc8-05d8d8d33d52","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a516f7-9603-481c-abc8-05d8d8d33d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50892","PortSpecifier":{"PortValue":50892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f0a0994-60e7-4d22-85ae-729709e900d0","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50892","PortSpecifier":{"PortValue":50892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982244,"nanos":315751701},"http":{"id":"6f0a0994-60e7-4d22-85ae-729709e900d0","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f0a0994-60e7-4d22-85ae-729709e900d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50896","PortSpecifier":{"PortValue":50896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50896","PortSpecifier":{"PortValue":50896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982245,"nanos":357186182},"http":{"id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb33eea-17ad-487a-a62c-1ef8b628ec7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982246,"nanos":392065505},"http":{"id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af7b33a6-0496-4054-8a9d-2c4c4487eda7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b5a249-902b-4c7a-9196-83b500602d22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48028","PortSpecifier":{"PortValue":48028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21b5a249-902b-4c7a-9196-83b500602d22","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b5a249-902b-4c7a-9196-83b500602d22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48028","PortSpecifier":{"PortValue":48028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982247,"nanos":427650772},"http":{"id":"21b5a249-902b-4c7a-9196-83b500602d22","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GlHCrYyJZm93AGaU_mbdcreJipwt332BQdSTM7yQ2YODxwlZ0pGBKNYAPfxT\"}"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","subscription":"e2e-rate-iso-a-cf6651","tenant":"e2e-shared-a-0eaefd","userId":"b39175a0-fa48-49c4-b024-009990a935e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-cf6651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21b5a249-902b-4c7a-9196-83b500602d22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cf6651"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b5a249-902b-4c7a-9196-83b500602d22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b39175a0-fa48-49c4-b024-009990a935e4","keyName":"e2e-rate-a-cf6651","selected_subscription":"e2e-rate-iso-a-cf6651","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-cf6651@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cf6651","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b5a249-902b-4c7a-9196-83b500602d22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b5a249-902b-4c7a-9196-83b500602d22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48030","PortSpecifier":{"PortValue":48030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91c6febb-ee95-478d-a575-7921e5a3311e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48030","PortSpecifier":{"PortValue":48030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982256,"nanos":73787881},"http":{"id":"91c6febb-ee95-478d-a575-7921e5a3311e","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91c6febb-ee95-478d-a575-7921e5a3311e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982256,"nanos":109447898},"http":{"id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1ae1158c-1a13-437e-ad59-8868725741d1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"]}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bcbcb558cc4d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98dde043-9bd3-440f-9090-3aaa3969afbc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1ae1158c-1a13-437e-ad59-8868725741d1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34c29bd1-fd80-45dc-a78f-7d730fdebce7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48042","PortSpecifier":{"PortValue":48042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aba9f0ed-72a1-4554-906c-2fffc5575952","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48042","PortSpecifier":{"PortValue":48042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982256,"nanos":146919499},"http":{"id":"aba9f0ed-72a1-4554-906c-2fffc5575952","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aba9f0ed-72a1-4554-906c-2fffc5575952","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26fc30bd-3368-4914-ac63-277da15f6401","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47306","PortSpecifier":{"PortValue":47306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26fc30bd-3368-4914-ac63-277da15f6401","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26fc30bd-3368-4914-ac63-277da15f6401","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47306","PortSpecifier":{"PortValue":47306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982257,"nanos":182460670},"http":{"id":"26fc30bd-3368-4914-ac63-277da15f6401","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26fc30bd-3368-4914-ac63-277da15f6401","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26fc30bd-3368-4914-ac63-277da15f6401","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26fc30bd-3368-4914-ac63-277da15f6401","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26fc30bd-3368-4914-ac63-277da15f6401","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47322","PortSpecifier":{"PortValue":47322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47322","PortSpecifier":{"PortValue":47322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982258,"nanos":220434838},"http":{"id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5d27617-86dd-4c58-abb4-cfa4dc3a71bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47338","PortSpecifier":{"PortValue":47338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47338","PortSpecifier":{"PortValue":47338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982259,"nanos":257982143},"http":{"id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5006cee-0c51-4532-90f7-a47be6ecc4db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47344","PortSpecifier":{"PortValue":47344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982260,"nanos":296436153},"http":{"id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6309cb92-b9cd-43b7-a3f5-2aaa4a719a70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47348","PortSpecifier":{"PortValue":47348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ebc9345-09c0-464e-af3a-977d2380fe28","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47348","PortSpecifier":{"PortValue":47348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982261,"nanos":330692573},"http":{"id":"6ebc9345-09c0-464e-af3a-977d2380fe28","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebc9345-09c0-464e-af3a-977d2380fe28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982262,"nanos":365373443},"http":{"id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5af2d6f6-cb5d-4502-9297-553faf22b8be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"667c5629-8c6e-40a3-9437-f62b9bac3190","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982263,"nanos":402109174},"http":{"id":"667c5629-8c6e-40a3-9437-f62b9bac3190","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"667c5629-8c6e-40a3-9437-f62b9bac3190","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2e19956-d574-4233-b774-36cfbe064dd0","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982264,"nanos":436567220},"http":{"id":"e2e19956-d574-4233-b774-36cfbe064dd0","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2e19956-d574-4233-b774-36cfbe064dd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47376","PortSpecifier":{"PortValue":47376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47376","PortSpecifier":{"PortValue":47376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982265,"nanos":471430965},"http":{"id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38cbf1f0-4ade-4fdd-aca6-3057e60133e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10e5386a-6005-43cf-b8b0-63a83546ec95","method":"POST","path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions","host":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58900","PortSpecifier":{"PortValue":58900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982266,"nanos":507373257},"http":{"id":"10e5386a-6005-43cf-b8b0-63a83546ec95","method":"POST","headers":{":authority":"e2e-shared-a-0eaefd.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PAm2j83N052WFSvv_x7tzroSZ0iEYB1AW1nldcpEY2AAFT5pbj9ZMnjjplpk\"}"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","subscription":"e2e-rate-iso-a-130a99","tenant":"e2e-shared-a-0eaefd","userId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\",\"requestedSubscription\":\"e2e-rate-iso-a-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0eaefd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3328fdd-243a-4381-ab80-a2d664cb7d01","keyName":"e2e-rate-a-130a99","selected_subscription":"e2e-rate-iso-a-130a99","selected_subscription_key":"ai-tenant-e2e-shared-a-0eaefd/e2e-rate-iso-a-130a99@ai-tenant-e2e-shared-a-0eaefd/rate-test-model-0eaefd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0eaefd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-130a99","namespace":"ai-tenant-e2e-shared-a-0eaefd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10e5386a-6005-43cf-b8b0-63a83546ec95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39816","PortSpecifier":{"PortValue":39816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","method":"POST","path":"/ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279/v1/completions","host":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39816","PortSpecifier":{"PortValue":39816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783982266,"nanos":546936269},"http":{"id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","method":"POST","headers":{":authority":"e2e-shared-b-4b5279.apps.f1b82c64-0b3b-42d8-bbe1-bcbcb558cc4d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D90DM566oEN4pisL_Pe50NIBUWOfB7efMneRYcbeeAUXrPIL7zU4XELQxEZe"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-D90DM566oEN4pisL_Pe50NIBUWOfB7efMneRYcbeeAUXrPIL7zU4XELQxEZe\"}"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62e9cfd6-8ce2-4d09-aa43-4020dbdfe4a5","keyName":"e2e-rate-b-130a99","subscription":"e2e-rate-iso-b-130a99","tenant":"e2e-shared-b-4b5279","userId":"62e9cfd6-8ce2-4d09-aa43-4020dbdfe4a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279\",\"requestedSubscription\":\"e2e-rate-iso-b-130a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4b5279.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b5279","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-130a99","namespace":"ai-tenant-e2e-shared-b-4b5279","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-130a99"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62e9cfd6-8ce2-4d09-aa43-4020dbdfe4a5","keyName":"e2e-rate-b-130a99","selected_subscription":"e2e-rate-iso-b-130a99","selected_subscription_key":"ai-tenant-e2e-shared-b-4b5279/e2e-rate-iso-b-130a99@ai-tenant-e2e-shared-b-4b5279/rate-test-model-4b5279","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b5279","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-130a99","namespace":"ai-tenant-e2e-shared-b-4b5279","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T22:37:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e44afbe-dd1f-4dfa-96db-b1195f49fda9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T22:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7457200c8257af1effb9ef5944174cc682e91aef8417b77776dde9322a0e51a"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/335f078580ae29157c586f8550eb6e5d01fb9d6cf5fcd5539a1ef899c13bc8a6"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c96bfca862872ea213a5bdd8dc2fdff1ec9c82ab2e3bbb68549196dc83e48a8"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a7d7468d8910383ce0cc1e8b759d24155bd6a0a32197358a3671fb214671278"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/769ef7c908e093a9018325bd796c76c9ffeece14d01fbf936d79d52e65b98edd"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3a4cb831e932413fc703ca9039db332bd8c4365271056eaf7dd219bbd348f0b"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/751efa761bd5ac6c5704ddc31d154dfc46b8eb1819abae0e752246c9fcd740f5"}
{"level":"info","ts":"2026-07-13T22:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2043e47e7c88525339dc19916d0a8adb3d2a425b9a3fdb6a683cf318a8b435b"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50dcbff4abf9ba3e6516437a6f65877d028c282175c966e2304986af2e13398"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd93b16a661c7a357d72b7c3e61c5048e62626985f639e330ec32f1c80290180"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7753570a5cfe4c2fb0b9cc1107e3bc1c92b5c9a44c163fef72f9702ff346e29"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4a1e85d999b07fc0285640448dbd4c762a4b8cbe9af13cbc8087b5fc1163941"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a119f81d009f9ce51b7ab7f8fd50f18aab69bbd9b344de315f99daeff0bc06"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b62f4290a2ff3ef71b9c0bf8e4e175c182cf7382ac254b9944b6e33fb0a851b9"}
{"level":"info","ts":"2026-07-13T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84bce465adc1732fefe8f2c401b3ed33dac7866418864b20e22c65034e70bf92"}
{"level":"info","ts":"2026-07-13T22:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1ccfb9bc2808c6e1ace99f02a29c13a0940f9884b77e72a51272e0f81b30ddb"}
{"level":"info","ts":"2026-07-13T22:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcda91e3f34723ba6d82dc099d00b3c6405f8befdb5d0123e2bcbb4ed09583ac"}
{"level":"info","ts":"2026-07-13T22:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/685d1254bd9b086145c9fdfff74905feaa7a70d9baa78358c6575b8c0a4be7ba"}
{"level":"info","ts":"2026-07-13T22:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/940615382ccf8b12900b45ea48d0210269f30a70ff90c64c3c64ccb504e32fc8"}
{"level":"info","ts":"2026-07-13T22:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad91236a47f8550e4bde8d2dbf0c1fbc273af45d3fb35a0d4794849131571375"}
{"level":"info","ts":"2026-07-13T22:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0857c22a8829df74da7294a73b247f39c03604778883ecc155a07b0c6ae3882"}
{"level":"info","ts":"2026-07-13T22:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b5f46ce9551e8c29eb79515e0c7e15b235abb53b5d854e9aa34921279d51bd"}
{"level":"info","ts":"2026-07-13T22:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c57de447851479ca85c8e3ac4e988ae31529ae6bbd302a702bc6623a97d49572"}
{"level":"info","ts":"2026-07-13T22:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/958918473e9dad1c2980bbac024154040036a5933e2e109624d0f6950b80e307"}