{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"}
{"level":"error","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0884661f-64d5-4355-924e-45991a7733b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44742","PortSpecifier":{"PortValue":44742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0884661f-64d5-4355-924e-45991a7733b0","object":"source:{address:{socket_address:{address:\"10.133.0.11:44742\"  port_value:44742}}}  destination:{address:{socket_address:{address:\"10.132.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785536965  nanos:61398862}  http:{id:\"0884661f-64d5-4355-924e-45991a7733b0\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"0884661f-64d5-4355-924e-45991a7733b0\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0884661f-64d5-4355-924e-45991a7733b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0884661f-64d5-4355-924e-45991a7733b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0884661f-64d5-4355-924e-45991a7733b0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":61398862,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44742},"address":"10.133.0.11:44742"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0884661f-64d5-4355-924e-45991a7733b0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":61398862,"seconds":1785536965},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44742","port":44742}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0884661f-64d5-4355-924e-45991a7733b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0884661f-64d5-4355-924e-45991a7733b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34100","PortSpecifier":{"PortValue":34100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","object":"source:{address:{socket_address:{address:\"10.133.0.11:34100\"  port_value:34100}}}  destination:{address:{socket_address:{address:\"10.132.0.75:443\"  port_value:443}}}  request:{time:{seconds:1785536965  nanos:107882316}  http:{id:\"274b926b-b4ac-44f0-b824-c9126cab182b\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"274b926b-b4ac-44f0-b824-c9126cab182b\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"274b926b-b4ac-44f0-b824-c9126cab182b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":107882316,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34100},"address":"10.133.0.11:34100"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"274b926b-b4ac-44f0-b824-c9126cab182b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":107882316,"seconds":1785536965},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:34100","port":34100}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44756","PortSpecifier":{"PortValue":44756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","object":"source:{address:{socket_address:{address:\"10.133.0.11:44756\"  port_value:44756}}}  destination:{address:{socket_address:{address:\"10.132.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785536965  nanos:151689830}  http:{id:\"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2\"}  path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"  host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":151689830,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44756},"address":"10.133.0.11:44756"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":151689830,"seconds":1785536965},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44756","port":44756}}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44772","PortSpecifier":{"PortValue":44772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","object":"source:{address:{socket_address:{address:\"10.133.0.11:44772\"  port_value:44772}}}  destination:{address:{socket_address:{address:\"10.132.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785536966  nanos:192049837}  http:{id:\"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d\"}  path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"  host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":192049837,"seconds":1785536966}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44772},"address":"10.133.0.11:44772"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":192049837,"seconds":1785536966},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44772","port":44772}}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44778","PortSpecifier":{"PortValue":44778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","object":"source:{address:{socket_address:{address:\"10.133.0.11:44778\"  port_value:44778}}}  destination:{address:{socket_address:{address:\"10.132.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785536967  nanos:233783168}  http:{id:\"19d331bf-047b-4d71-afec-fd0db8723613\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"19d331bf-047b-4d71-afec-fd0db8723613\"}  path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"  host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d331bf-047b-4d71-afec-fd0db8723613","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"19d331bf-047b-4d71-afec-fd0db8723613"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":233783168,"seconds":1785536967}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44778},"address":"10.133.0.11:44778"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"19d331bf-047b-4d71-afec-fd0db8723613"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":233783168,"seconds":1785536967},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44778","port":44778}}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d331bf-047b-4d71-afec-fd0db8723613","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d331bf-047b-4d71-afec-fd0db8723613","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34116","PortSpecifier":{"PortValue":34116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","object":"source:{address:{socket_address:{address:\"10.133.0.11:34116\"  port_value:34116}}}  destination:{address:{socket_address:{address:\"10.132.0.75:443\"  port_value:443}}}  request:{time:{seconds:1785536967  nanos:274563391}  http:{id:\"56634e8d-9cda-4bb6-a1da-2bc167919a9d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"56634e8d-9cda-4bb6-a1da-2bc167919a9d\"}  path:\"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions\"  host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S7m3GbpuiTR8v8K8_FINwMUrNVS8GWMPZC19bX6SlHvBFhCDPibAmYgkJvuv"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","keyName":"e2e-rate-b-ad07ab","subscription":"e2e-rate-iso-b-ad07ab","tenant":"e2e-shared-b-21e950","userId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m","name":"rate-test-model-21e950","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ad07ab","namespace":"ai-tenant-e2e-shared-b-21e950","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950"}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":274563391,"seconds":1785536967}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34116},"address":"10.133.0.11:34116"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":274563391,"seconds":1785536967},"url_path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:34116","port":34116}}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ad07ab"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","keyName":"e2e-rate-b-ad07ab","selected_subscription":"e2e-rate-iso-b-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-b-21e950/e2e-rate-iso-b-ad07ab@ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m","name":"rate-test-model-21e950","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ad07ab","namespace":"ai-tenant-e2e-shared-b-21e950","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"}
{"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"}
{"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","object":"source:{address:{socket_address:{address:\"10.133.0.11:55140\"  port_value:55140}}}  destination:{address:{socket_address:{address:\"10.133.0.49:443\"  port_value:443}}}  request:{time:{seconds:1785537050  nanos:219778897}  http:{id:\"3f06ae46-120b-4b16-a5d8-76915e2d4355\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"3f06ae46-120b-4b16-a5d8-76915e2d4355\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LXFwbDY2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3f06ae46-120b-4b16-a5d8-76915e2d4355"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":219778897,"seconds":1785537050}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55140},"address":"10.133.0.11:55140"}}}}},"destination":{"address":"10.133.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LXFwbDY2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3f06ae46-120b-4b16-a5d8-76915e2d4355"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":219778897,"seconds":1785537050},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55140","port":55140}}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55150","PortSpecifier":{"PortValue":55150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","object":"source:{address:{socket_address:{address:\"10.133.0.11:55150\"  port_value:55150}}}  destination:{address:{socket_address:{address:\"10.133.0.49:443\"  port_value:443}}}  request:{time:{seconds:1785537050  nanos:269183953}  http:{id:\"007bd423-1f0a-47fa-95f0-393a53584fd4\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"007bd423-1f0a-47fa-95f0-393a53584fd4\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FdGw5w9DRtLqIgP4_2o72xOmpP5VkylmQ9fyOcBED7okooJiP7MOkpGzs0RG"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"007bd423-1f0a-47fa-95f0-393a53584fd4"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":269183953,"seconds":1785537050}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55150},"address":"10.133.0.11:55150"}}}}},"destination":{"address":"10.133.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"007bd423-1f0a-47fa-95f0-393a53584fd4"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":269183953,"seconds":1785537050},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55150","port":55150}}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"}
{"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"}
{"level":"error","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50180","PortSpecifier":{"PortValue":50180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","object":"source:{address:{socket_address:{address:\"10.133.0.11:50180\"  port_value:50180}}}  destination:{address:{socket_address:{address:\"10.132.0.80:443\"  port_value:443}}}  request:{time:{seconds:1785537093  nanos:18536269}  http:{id:\"7a653d19-0483-41ba-9951-f6b58bdc1dfb\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"7a653d19-0483-41ba-9951-f6b58bdc1dfb\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":18536269,"seconds":1785537093}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50180},"address":"10.133.0.11:50180"}}}}},"destination":{"address":"10.132.0.80:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"},"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":18536269,"seconds":1785537093},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:50180","port":50180}}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-068335/ipp-route-068335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50192","PortSpecifier":{"PortValue":50192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","object":"source:{address:{socket_address:{address:\"10.133.0.11:50192\"  port_value:50192}}}  destination:{address:{socket_address:{address:\"10.132.0.80:443\"  port_value:443}}}  request:{time:{seconds:1785537095  nanos:76378857}  http:{id:\"96c3f5a1-d860-4b97-a957-ed7639a234bc\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdC03NTk0NTY3NTZkLXJ2c3B6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.133.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"96c3f5a1-d860-4b97-a957-ed7639a234bc\"}  path:\"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions\"  host:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MDnHJSq2GZxRWShF_ZY4qNDQTlk7Gykr9tyGz3tOrg7ATZ5h4daG2GN9AF2N"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","keyName":"e2e-ipp-068335","subscription":"ipp-route-068335-sub","tenant":"e2e-ipp-a-068335","userId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m","name":"ipp-route-068335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-068335-sub","namespace":"ai-tenant-e2e-ipp-a-068335","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335"}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96c3f5a1-d860-4b97-a957-ed7639a234bc"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":76378857,"seconds":1785537095}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50192},"address":"10.133.0.11:50192"}}}}},"destination":{"address":"10.132.0.80:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"},"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96c3f5a1-d860-4b97-a957-ed7639a234bc"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":76378857,"seconds":1785537095},"url_path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:50192","port":50192}}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-068335/ipp-route-068335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-068335-sub"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","keyName":"e2e-ipp-068335","selected_subscription":"ipp-route-068335-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335-sub@ai-tenant-e2e-ipp-a-068335/ipp-route-068335","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m","name":"ipp-route-068335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-068335-sub","namespace":"ai-tenant-e2e-ipp-a-068335","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"}
{"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}