{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"error","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"debug","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:17:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":540401185},"http":{"id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e89177c-9b09-4c3c-b6ef-cfaec1c2fe87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37192","PortSpecifier":{"PortValue":37192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37192","PortSpecifier":{"PortValue":37192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":587425131},"http":{"id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0911218f-f4ce-4f23-88d6-9e2c3e2a3421","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41480","PortSpecifier":{"PortValue":41480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41480","PortSpecifier":{"PortValue":41480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347466,"nanos":635294242},"http":{"id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"052d6e08-8b3f-4d8d-8471-f9cf5f8c1987","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecddc5f6-530f-4007-839c-468fc8442b4e","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347467,"nanos":702692040},"http":{"id":"ecddc5f6-530f-4007-839c-468fc8442b4e","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecddc5f6-530f-4007-839c-468fc8442b4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99e1007-299d-4a2a-b80e-937198fc503b","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347468,"nanos":745201857},"http":{"id":"c99e1007-299d-4a2a-b80e-937198fc503b","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1McBPZx42qbkBXNqJ_JV8QC3XuD6bv0vUUNzqfQIR5ZWSLFN23LtAHfwW9jOA\"}"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","subscription":"e2e-rate-iso-a-276029","tenant":"e2e-shared-a-973328","userId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-276029\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-276029"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4731998e-bb17-4ed6-b1c3-12d827d5be23","keyName":"e2e-rate-a-276029","selected_subscription":"e2e-rate-iso-a-276029","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-276029@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-276029","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99e1007-299d-4a2a-b80e-937198fc503b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569610a-b748-434c-9f61-ad005edee4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35460","PortSpecifier":{"PortValue":35460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d569610a-b748-434c-9f61-ad005edee4ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569610a-b748-434c-9f61-ad005edee4ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35460","PortSpecifier":{"PortValue":35460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":512352284},"http":{"id":"d569610a-b748-434c-9f61-ad005edee4ca","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d569610a-b748-434c-9f61-ad005edee4ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d569610a-b748-434c-9f61-ad005edee4ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569610a-b748-434c-9f61-ad005edee4ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569610a-b748-434c-9f61-ad005edee4ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e890a2a8-496f-4e9d-8810-beb2398adb15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":553678983},"http":{"id":"e890a2a8-496f-4e9d-8810-beb2398adb15","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"]}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/135d6b5cc4ec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c6f48d5a-dfe8-4b67-8530-cd1a9e024122"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6a6d5a7-1bd0-48f1-be1d-02c3b748744c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e890a2a8-496f-4e9d-8810-beb2398adb15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6351181e-a454-4a20-95ed-f7cd98be66d9","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35462","PortSpecifier":{"PortValue":35462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347479,"nanos":594511495},"http":{"id":"6351181e-a454-4a20-95ed-f7cd98be66d9","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6351181e-a454-4a20-95ed-f7cd98be66d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347480,"nanos":633661393},"http":{"id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f8c3d5-6bbb-40e6-9cac-82db84a2814c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","method":"POST","path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions","host":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347481,"nanos":674198808},"http":{"id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","method":"POST","headers":{":authority":"e2e-shared-a-973328.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-973328/rate-test-model-973328/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-763hs4cOF97g4OdQ_FladkfTfksGMtPWmR3nRqLZKtYKWYJQYbgTCsrkQDDW\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","subscription":"e2e-rate-iso-a-8d2f32","tenant":"e2e-shared-a-973328","userId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\",\"requestedSubscription\":\"e2e-rate-iso-a-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-973328.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-973328/rate-test-model-973328\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f910897e-9e02-47d3-a9b3-4f7dfe57ce12","keyName":"e2e-rate-a-8d2f32","selected_subscription":"e2e-rate-iso-a-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-a-973328/e2e-rate-iso-a-8d2f32@ai-tenant-e2e-shared-a-973328/rate-test-model-973328","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-973328","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8d2f32","namespace":"ai-tenant-e2e-shared-a-973328","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef574adc-7c6e-41c1-8931-c7a12a206ac4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"202d34e1-70fa-464f-8c60-25bb35d25334","method":"POST","path":"/ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041/v1/completions","host":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347481,"nanos":709161244},"http":{"id":"202d34e1-70fa-464f-8c60-25bb35d25334","method":"POST","headers":{":authority":"e2e-shared-b-35c041.apps.3878f032-6fc6-440b-b7a2-135d6b5cc4ec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FVU4uJ4mI42EhP1w_AjKoihx1Gw14XBNgJvWfg9EBLqDq0Y2WsWKQZ4mUpGM"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FVU4uJ4mI42EhP1w_AjKoihx1Gw14XBNgJvWfg9EBLqDq0Y2WsWKQZ4mUpGM\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1d256c1-e33d-467a-80dc-8719625f7054","keyName":"e2e-rate-b-8d2f32","subscription":"e2e-rate-iso-b-8d2f32","tenant":"e2e-shared-b-35c041","userId":"a1d256c1-e33d-467a-80dc-8719625f7054","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\",\"requestedSubscription\":\"e2e-rate-iso-b-8d2f32\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-35c041.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-35c041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8d2f32","namespace":"ai-tenant-e2e-shared-b-35c041","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8d2f32"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1d256c1-e33d-467a-80dc-8719625f7054","keyName":"e2e-rate-b-8d2f32","selected_subscription":"e2e-rate-iso-b-8d2f32","selected_subscription_key":"ai-tenant-e2e-shared-b-35c041/e2e-rate-iso-b-8d2f32@ai-tenant-e2e-shared-b-35c041/rate-test-model-35c041","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-35c041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8d2f32","namespace":"ai-tenant-e2e-shared-b-35c041","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:18:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"202d34e1-70fa-464f-8c60-25bb35d25334","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33fbe37a3c68c7d97324c1ee5e5e6334c2df02d53c8a4a1fcf58998b81b352ee"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e178649cf3b46a2faeef9ca560e88bf3f2e6c9a5e0606edda0220b93f780ac"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d9d96f5ee5442e6f934c1a600973af24ed29e0e3705cf5dd69ef42197fb3f73"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5ba986e049cde4307fd143e9837f0393d118c43fd9a424fbe03b5167ca60ba0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f813ae65ba1247f558c8201ddba0f6ffe0a851e08012cb11b7b9fb7288c883f"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2df9e1bbc4e1f960613c7b4ae849febfb94e59f76c3c5f214e76e8a22014d6"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a9d2dd76fe59509b2dafd9b438aeabdc418e7b33125a9feaf06947aa36e611"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7f7098ae0065d84528b9190611211fa5ea8959b9d5f75d09b4af3a59a5b7ef0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86dd46665b256be6919d926a25758a46193f9e3d2ac43c9f89bf720353e28c0"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ab34763fd9f8dc6ef055cfd5c4389cf8bde40bf32654c4869367fb6811490a"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7105ad5e2975227cc57932994e1d13ff5dbfd82e115c93c07a09d711df40886"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48671a83ea4d3a5e9a26eff36fbdeae24a7b34d9566ee50d4944a60691e64128"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/721528cce5a4d80bdf7d437cff0cb5f6a25b0f23fd517649bfbfcbf2b0c9e0ed"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/271dae8c5c71330aec0f3569b62b84d3ac1d06808b2870106c36d1ef764eaecd"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a90adb41f3e244f770fde3fa14efafd247807ab1e5e332261c1e7ca7f431d12"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29e83768e81d9cbd826d0e8093aef672507bd426cb33a04762906f6c38fd9da9"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b40e692ab316e9414eb7c2294abada77b6d327c8173e0426f0d13820e41be3"}
{"level":"info","ts":"2026-07-06T14:18:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6945b20db544672272ce1637075490892c5bc5ea5a69f7febefec0fa5732fdaf"}
{"level":"info","ts":"2026-07-06T14:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cafec5616a002f730c2750c84d755c5403e1f9a4ed68fcd67774505e4f561210"}
{"level":"info","ts":"2026-07-06T14:18:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4419a2cb4d4f284fafe3e64cdbf18721b5325f849033bb4f9677a035f6de4ab"}