{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8007e2b17f385c5800f60db212bfbb8ab2a1fe80dca23452d4ae4c1efda9054f"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dff4c5cc70d9cadc18f72a0ba526ba6da9408e7036f9d99da5d50b3990f7134"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60d0f0f2e00fcf002a1ae019c40a20c0e441b479ac0823131f3a4d1abe8a8323"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71c564b84fd8052b43f607ec4f5f686d6a73b8cbec71bee34d9e8de1ec1e0ee0"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4d68c3fcf9ae649b82cce086428d83e1474129e1c954db47203bcab62b1c114"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3a21859399cb97ceea8caa9d78401f6c2819633545e9f97ee4b6fbda4630121"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/970e289e0d2433d59ea1079d1eb3dc17271be266ed214f06746d121abbf8e830"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55580458da293d777a0def8ba65dcbad2a0f525448717c4e7f6b441c51cd93c3"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d262f5befae7a69d0896478f7e1b5b0d070d54417e0c3537fc5c2d7902b303a9"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b663bca49ff03a9ad6692d4be8c4e5be476bc00be68909ef77e71b56575d47c5"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccc56fc6205925b6205125565109ac46b58f041d2e8cf6e29cb2ed21ca725cce"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/863978961dd1349d73f91d71a662c306c129cb374aed3b1a87842ccab05937d9"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34aff2471f4be12f889e8807c264ac310c21cace4336f10c91473fa8c6bc1a6d"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29801f58eddb469cc61e843cd3c35779de80be861e43866ea3407c086a537f48"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e7437534df0a4379047280b2b916c75bda1eca68a2509ffdc3ae27c6818423e"}
{"level":"info","ts":"2026-07-07T07:37:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7dbc5a5fe24d0dfb5f14c117bffe314d142615c6c7c91637859831d4b507172"}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"info","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d"}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdc41157d904648fefeae50076a4659b4c62c8c24227664fd8896271164ad0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fd7b2f8ae5d1c640d875e4bef6a6d44c63216bef5d519d6b3eb2b476f71e266","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdc41157d904648fefeae50076a4659b4c62c8c24227664fd8896271164ad0ed"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fd7b2f8ae5d1c640d875e4bef6a6d44c63216bef5d519d6b3eb2b476f71e266"}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42b6ceb2e2c2be925350cf8fc8af16ea2b062e363395765aaaf51195f7cb781","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"526f2231bce892ce50ec3c332536a90357cf03d9bf9ffdd2f6e184c5e33a6503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42b6ceb2e2c2be925350cf8fc8af16ea2b062e363395765aaaf51195f7cb781"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509b3e641afc5eafa73af4e106cea4e8ce64921f6bd5f9509f1519371255129b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bb495aeda1a5ff21049dd329c8f77015cd85a6f97d16b135c3f3142221c23f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/526f2231bce892ce50ec3c332536a90357cf03d9bf9ffdd2f6e184c5e33a6503"}
{"level":"debug","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecffff50bb68151a82af12ea9df0e4bef59bfdc61b709d384278e8c57d3998f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509b3e641afc5eafa73af4e106cea4e8ce64921f6bd5f9509f1519371255129b"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bb495aeda1a5ff21049dd329c8f77015cd85a6f97d16b135c3f3142221c23f6"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecffff50bb68151a82af12ea9df0e4bef59bfdc61b709d384278e8c57d3998f9"}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd616d7f4ee9417c2badeaf3073c013f62da8b8e7f97ebb45f0f627c23a5511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T07:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd616d7f4ee9417c2badeaf3073c013f62da8b8e7f97ebb45f0f627c23a5511"}
{"level":"error","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9523b2db462a9ea9e34e68ff917b08736824b1209bd6f0979b06ec87feb8461a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9523b2db462a9ea9e34e68ff917b08736824b1209bd6f0979b06ec87feb8461a"}
{"level":"info","ts":"2026-07-07T07:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49848","PortSpecifier":{"PortValue":49848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49848","PortSpecifier":{"PortValue":49848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409886,"nanos":216440115},"http":{"id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"]}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cdc41157d904648fefeae50076a4659b4c62c8c24227664fd8896271164ad0ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1cfc43-4fdc-4417-a2c8-a730d6c59be7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35480","PortSpecifier":{"PortValue":35480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35480","PortSpecifier":{"PortValue":35480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409886,"nanos":262199886},"http":{"id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","method":"POST","headers":{":authority":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"]}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ccd616d7f4ee9417c2badeaf3073c013f62da8b8e7f97ebb45f0f627c23a5511"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01dd9250-fae3-4dff-859a-1d5a01ac3e20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49862","PortSpecifier":{"PortValue":49862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49862","PortSpecifier":{"PortValue":49862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409886,"nanos":304084852},"http":{"id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys\"}"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","subscription":"e2e-rate-iso-a-baddf9","tenant":"e2e-shared-a-083d4e","userId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-baddf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-baddf9"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","selected_subscription":"e2e-rate-iso-a-baddf9","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-baddf9@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40fc07f6-f00d-4c3b-8bab-a3e6aa78ec93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49870","PortSpecifier":{"PortValue":49870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c02972a2-586e-408e-8b4e-8343aa28670e","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49870","PortSpecifier":{"PortValue":49870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409887,"nanos":368372136},"http":{"id":"c02972a2-586e-408e-8b4e-8343aa28670e","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys\"}"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","subscription":"e2e-rate-iso-a-baddf9","tenant":"e2e-shared-a-083d4e","userId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-baddf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-baddf9"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","selected_subscription":"e2e-rate-iso-a-baddf9","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-baddf9@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c02972a2-586e-408e-8b4e-8343aa28670e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49872","PortSpecifier":{"PortValue":49872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84f51647-6ac9-4761-a1a7-39aa189414ad","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49872","PortSpecifier":{"PortValue":49872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409888,"nanos":402313897},"http":{"id":"84f51647-6ac9-4761-a1a7-39aa189414ad","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DhG0HJZQR4PmUlXz_2GWsUl9Sidde65eHJPjiLZMJMT4xPt5nDpVYXGSsjys\"}"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","subscription":"e2e-rate-iso-a-baddf9","tenant":"e2e-shared-a-083d4e","userId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-baddf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-baddf9"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fa592a2-2e96-4f8e-8c43-db0c3987d6ff","keyName":"e2e-rate-a-baddf9","selected_subscription":"e2e-rate-iso-a-baddf9","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-baddf9@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-baddf9","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84f51647-6ac9-4761-a1a7-39aa189414ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409899,"nanos":121669502},"http":{"id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"]}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cdc41157d904648fefeae50076a4659b4c62c8c24227664fd8896271164ad0ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f9c4eb-c846-47fb-a6c5-6c8269f48998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38612","PortSpecifier":{"PortValue":38612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38612","PortSpecifier":{"PortValue":38612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409899,"nanos":163311262},"http":{"id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","method":"POST","headers":{":authority":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"]}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4861f9e072d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1f50950-c317-427f-a1a5-1ba21187345c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5172d47e-e0aa-4c2b-87f9-8f46307358c5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ccd616d7f4ee9417c2badeaf3073c013f62da8b8e7f97ebb45f0f627c23a5511"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"023f8209-a06f-4b41-a5a4-4aeffeb3a6de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51838","PortSpecifier":{"PortValue":51838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51838","PortSpecifier":{"PortValue":51838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409899,"nanos":196446243},"http":{"id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5\"}"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","subscription":"e2e-rate-iso-a-558387","tenant":"e2e-shared-a-083d4e","userId":"977bd750-5559-4475-8c68-150fd50a00d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-558387\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-558387"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","selected_subscription":"e2e-rate-iso-a-558387","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-558387@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf240c5-bb39-4c0b-bc56-a4b532bddcb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51854","PortSpecifier":{"PortValue":51854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81020ab0-4acc-45a1-babb-44068c8389eb","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51854","PortSpecifier":{"PortValue":51854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409900,"nanos":239007404},"http":{"id":"81020ab0-4acc-45a1-babb-44068c8389eb","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5\"}"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","subscription":"e2e-rate-iso-a-558387","tenant":"e2e-shared-a-083d4e","userId":"977bd750-5559-4475-8c68-150fd50a00d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-558387\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-558387"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","selected_subscription":"e2e-rate-iso-a-558387","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-558387@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81020ab0-4acc-45a1-babb-44068c8389eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51866","PortSpecifier":{"PortValue":51866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","method":"POST","path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions","host":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51866","PortSpecifier":{"PortValue":51866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409901,"nanos":274231377},"http":{"id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","method":"POST","headers":{":authority":"e2e-shared-a-083d4e.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lmZQDxQZzdEY7aQE_YFSZXxL0NTshqMbUDsqIdodytOve34BHjoMzPWxrXy5\"}"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","subscription":"e2e-rate-iso-a-558387","tenant":"e2e-shared-a-083d4e","userId":"977bd750-5559-4475-8c68-150fd50a00d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\",\"requestedSubscription\":\"e2e-rate-iso-a-558387\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-083d4e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-558387"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"977bd750-5559-4475-8c68-150fd50a00d3","keyName":"e2e-rate-a-558387","selected_subscription":"e2e-rate-iso-a-558387","selected_subscription_key":"ai-tenant-e2e-shared-a-083d4e/e2e-rate-iso-a-558387@ai-tenant-e2e-shared-a-083d4e/rate-test-model-083d4e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-083d4e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-558387","namespace":"ai-tenant-e2e-shared-a-083d4e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be2f7f3-45d3-49b8-bf5a-57368294f62d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32e42b31-52ab-4b89-8645-29c0b43ae215","method":"POST","path":"/ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad/v1/completions","host":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783409901,"nanos":309287502},"http":{"id":"32e42b31-52ab-4b89-8645-29c0b43ae215","method":"POST","headers":{":authority":"e2e-shared-b-1082ad.apps.e80b91ef-e4c3-4e13-9b51-4861f9e072d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Yg1uHqGKAJAYM0Zo_mxbbNvVrC8xpqa6bBtXDFhOLyYwA0scmjAzG5Hi7M9T"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1082ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Yg1uHqGKAJAYM0Zo_mxbbNvVrC8xpqa6bBtXDFhOLyYwA0scmjAzG5Hi7M9T\"}"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1082ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a6de668a-c3e1-422a-9671-57c18c8e112f","keyName":"e2e-rate-b-558387","subscription":"e2e-rate-iso-b-558387","tenant":"e2e-shared-b-1082ad","userId":"a6de668a-c3e1-422a-9671-57c18c8e112f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1082ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad\",\"requestedSubscription\":\"e2e-rate-iso-b-558387\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1082ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1082ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-558387","namespace":"ai-tenant-e2e-shared-b-1082ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-558387"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a6de668a-c3e1-422a-9671-57c18c8e112f","keyName":"e2e-rate-b-558387","selected_subscription":"e2e-rate-iso-b-558387","selected_subscription_key":"ai-tenant-e2e-shared-b-1082ad/e2e-rate-iso-b-558387@ai-tenant-e2e-shared-b-1082ad/rate-test-model-1082ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1082ad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-558387","namespace":"ai-tenant-e2e-shared-b-1082ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T07:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32e42b31-52ab-4b89-8645-29c0b43ae215","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9523b2db462a9ea9e34e68ff917b08736824b1209bd6f0979b06ec87feb8461a"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e929ef5a7945ff92fe95fdb0b7415ebc0797ce86978954a68815ede8e5e3d41d"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb99f44cbb88e896f15df97b8a9ef5e1386c34615e77c0620c104ee8c348029e"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f902846d766794480d7aa2eaa78a1accfd3d02c89a3d3f6be742d0d6c3f0f171"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/509b3e641afc5eafa73af4e106cea4e8ce64921f6bd5f9509f1519371255129b"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/921311055f86c595b56555d19942c4dfc09900bb53a279b459d703e495500d91"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d42b6ceb2e2c2be925350cf8fc8af16ea2b062e363395765aaaf51195f7cb781"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecffff50bb68151a82af12ea9df0e4bef59bfdc61b709d384278e8c57d3998f9"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d5b209a160e0fd0adeb0ea8c630547c6f79fe35289ac751a2cadcbb4ea734e6"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bb495aeda1a5ff21049dd329c8f77015cd85a6f97d16b135c3f3142221c23f6"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d1cd1eba7e64b75617983fcc88cdfa7fdf4665a5795b452605b881f6ea50d41"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fd0908a7ecc50a8a90a5ae7b9c02c5b8100daedb9bed74d855d629abf861153"}
{"level":"info","ts":"2026-07-07T07:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18c9a102e6e9462d48758873e89a3b9fce05fbebfe7b187b3cc61b9c274966e7"}
{"level":"info","ts":"2026-07-07T07:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106dacea88796b268d14320c2ff946e5fada353fa072bda8718e1d2c7ed66823"}
{"level":"info","ts":"2026-07-07T07:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fd7b2f8ae5d1c640d875e4bef6a6d44c63216bef5d519d6b3eb2b476f71e266"}
{"level":"info","ts":"2026-07-07T07:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5927c502e57e5fada960a77c1c9f0298b53eed75f596423e35e7ded55ba7e3d"}
{"level":"info","ts":"2026-07-07T07:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdc41157d904648fefeae50076a4659b4c62c8c24227664fd8896271164ad0ed"}
{"level":"info","ts":"2026-07-07T07:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5314d6c33aae80886e2789cd9efb237f37bf0ca10ba63a4265845dc83d239c1c"}
{"level":"info","ts":"2026-07-07T07:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccd616d7f4ee9417c2badeaf3073c013f62da8b8e7f97ebb45f0f627c23a5511"}
{"level":"info","ts":"2026-07-07T07:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/526f2231bce892ce50ec3c332536a90357cf03d9bf9ffdd2f6e184c5e33a6503"}