{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"}
{"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"}
{"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"}
{"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"}
{"level":"error","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59284","PortSpecifier":{"PortValue":59284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","object":"source:{address:{socket_address:{address:\"10.132.0.13:59284\"  port_value:59284}}}  destination:{address:{socket_address:{address:\"10.133.0.58:443\"  port_value:443}}}  request:{time:{seconds:1785804968  nanos:696178535}  http:{id:\"9f419973-d3e4-43bd-ab51-ccd0ff154099\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"9f419973-d3e4-43bd-ab51-ccd0ff154099\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f419973-d3e4-43bd-ab51-ccd0ff154099"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":696178535,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59284},"address":"10.132.0.13:59284"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f419973-d3e4-43bd-ab51-ccd0ff154099"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":696178535,"seconds":1785804968},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59284","port":59284}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","object":"source:{address:{socket_address:{address:\"10.132.0.13:57984\"  port_value:57984}}}  destination:{address:{socket_address:{address:\"10.134.0.59:443\"  port_value:443}}}  request:{time:{seconds:1785804968  nanos:733903887}  http:{id:\"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":733903887,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57984},"address":"10.132.0.13:57984"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":733903887,"seconds":1785804968},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57984","port":57984}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59286","PortSpecifier":{"PortValue":59286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","object":"source:{address:{socket_address:{address:\"10.132.0.13:59286\"  port_value:59286}}}  destination:{address:{socket_address:{address:\"10.133.0.58:443\"  port_value:443}}}  request:{time:{seconds:1785804968  nanos:774264823}  http:{id:\"13b8c8ac-bc83-46b8-99c9-804766a120f2\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"13b8c8ac-bc83-46b8-99c9-804766a120f2\"}  path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"  host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"13b8c8ac-bc83-46b8-99c9-804766a120f2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":774264823,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59286},"address":"10.132.0.13:59286"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"13b8c8ac-bc83-46b8-99c9-804766a120f2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":774264823,"seconds":1785804968},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59286","port":59286}}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59298","PortSpecifier":{"PortValue":59298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","object":"source:{address:{socket_address:{address:\"10.132.0.13:59298\"  port_value:59298}}}  destination:{address:{socket_address:{address:\"10.133.0.58:443\"  port_value:443}}}  request:{time:{seconds:1785804969  nanos:818594296}  http:{id:\"bac55dba-c428-44b5-ad06-816a328ede64\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"bac55dba-c428-44b5-ad06-816a328ede64\"}  path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"  host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac55dba-c428-44b5-ad06-816a328ede64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bac55dba-c428-44b5-ad06-816a328ede64"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":818594296,"seconds":1785804969}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59298},"address":"10.132.0.13:59298"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bac55dba-c428-44b5-ad06-816a328ede64"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":818594296,"seconds":1785804969},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59298","port":59298}}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac55dba-c428-44b5-ad06-816a328ede64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac55dba-c428-44b5-ad06-816a328ede64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59312","PortSpecifier":{"PortValue":59312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","object":"source:{address:{socket_address:{address:\"10.132.0.13:59312\"  port_value:59312}}}  destination:{address:{socket_address:{address:\"10.133.0.58:443\"  port_value:443}}}  request:{time:{seconds:1785804970  nanos:856660510}  http:{id:\"65d4e39b-cf49-4427-b1be-154cd6e9e896\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"65d4e39b-cf49-4427-b1be-154cd6e9e896\"}  path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"  host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"65d4e39b-cf49-4427-b1be-154cd6e9e896"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":856660510,"seconds":1785804970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59312},"address":"10.132.0.13:59312"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"65d4e39b-cf49-4427-b1be-154cd6e9e896"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":856660510,"seconds":1785804970},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59312","port":59312}}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57998","PortSpecifier":{"PortValue":57998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","object":"source:{address:{socket_address:{address:\"10.132.0.13:57998\"  port_value:57998}}}  destination:{address:{socket_address:{address:\"10.134.0.59:443\"  port_value:443}}}  request:{time:{seconds:1785804970  nanos:893437360}  http:{id:\"f2bdbefd-627d-4819-bd93-e47c987dba46\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"f2bdbefd-627d-4819-bd93-e47c987dba46\"}  path:\"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions\"  host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GmJpJI4WFbi6fVTW_b2Q3SNbI4xgz2qv1Xg13mjyb9w2lB3Fjkde277yYhW8"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff9d2125-825f-4065-9436-0c6b73a65f36","keyName":"e2e-rate-b-8b4c5a","subscription":"e2e-rate-iso-b-8b4c5a","tenant":"e2e-shared-b-5396f3","userId":"ff9d2125-825f-4065-9436-0c6b73a65f36","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m","name":"rate-test-model-5396f3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b4c5a","namespace":"ai-tenant-e2e-shared-b-5396f3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3"}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f2bdbefd-627d-4819-bd93-e47c987dba46"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":893437360,"seconds":1785804970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57998},"address":"10.132.0.13:57998"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f2bdbefd-627d-4819-bd93-e47c987dba46"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":893437360,"seconds":1785804970},"url_path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57998","port":57998}}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8b4c5a"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ff9d2125-825f-4065-9436-0c6b73a65f36","keyName":"e2e-rate-b-8b4c5a","selected_subscription":"e2e-rate-iso-b-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-b-5396f3/e2e-rate-iso-b-8b4c5a@ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m","name":"rate-test-model-5396f3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b4c5a","namespace":"ai-tenant-e2e-shared-b-5396f3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"}
{"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"}
{"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"}
{"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"}
{"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"}
{"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40162","PortSpecifier":{"PortValue":40162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","object":"source:{address:{socket_address:{address:\"10.132.0.13:40162\"  port_value:40162}}}  destination:{address:{socket_address:{address:\"10.133.0.42:443\"  port_value:443}}}  request:{time:{seconds:1785805054  nanos:411062900}  http:{id:\"5220697c-a157-46cb-8c7f-aa784f42f1b9\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"5220697c-a157-46cb-8c7f-aa784f42f1b9\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5220697c-a157-46cb-8c7f-aa784f42f1b9"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":411062900,"seconds":1785805054}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40162},"address":"10.132.0.13:40162"}}}}},"destination":{"address":"10.133.0.42:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5220697c-a157-46cb-8c7f-aa784f42f1b9"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":411062900,"seconds":1785805054},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:40162","port":40162}}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40178","PortSpecifier":{"PortValue":40178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","object":"source:{address:{socket_address:{address:\"10.132.0.13:40178\"  port_value:40178}}}  destination:{address:{socket_address:{address:\"10.133.0.42:443\"  port_value:443}}}  request:{time:{seconds:1785805054  nanos:464676785}  http:{id:\"3a5039da-ffff-4f2d-9596-0c512864b8e4\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"3a5039da-ffff-4f2d-9596-0c512864b8e4\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O7tHAWSisMREcscn_bfL1zsdFyzHYNWdeBD67W5JnVBMWlD4ZhgwMOyr0yGR"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWc2OHhzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3a5039da-ffff-4f2d-9596-0c512864b8e4"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":464676785,"seconds":1785805054}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40178},"address":"10.132.0.13:40178"}}}}},"destination":{"address":"10.133.0.42:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3a5039da-ffff-4f2d-9596-0c512864b8e4"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":464676785,"seconds":1785805054},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:40178","port":40178}}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"error","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"}
{"level":"error","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"}
{"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"}
{"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47864","PortSpecifier":{"PortValue":47864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","object":"source:{address:{socket_address:{address:\"10.132.0.13:47864\"  port_value:47864}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785805107  nanos:416336157}  http:{id:\"88591a3d-1dd7-40eb-9eaf-32031ba52cf6\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"88591a3d-1dd7-40eb-9eaf-32031ba52cf6\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":416336157,"seconds":1785805107}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47864},"address":"10.132.0.13:47864"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"},"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdC01Yzg0YzlkN2JkLW04OXpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":416336157,"seconds":1785805107},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47864","port":47864}}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-579628/ipp-route-579628\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47866","PortSpecifier":{"PortValue":47866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","object":"source:{address:{socket_address:{address:\"10.132.0.13:47866\"  port_value:47866}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785805109  nanos:479898089}  http:{id:\"85ae20df-2380-450b-994c-a7bc87a79681\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdC01Yzg0YzlkN2JkLW04OXpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"85ae20df-2380-450b-994c-a7bc87a79681\"}  path:\"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions\"  host:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-blJywuJYVORRIinl_xvL2wm8n8CxrBvTzgPg0PAW22pNYHLj4ZNP7hSxnCfI"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","keyName":"e2e-ipp-579628","subscription":"ipp-route-579628-sub","tenant":"e2e-ipp-a-579628","userId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m","name":"ipp-route-579628","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-579628-sub","namespace":"ai-tenant-e2e-ipp-a-579628","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628"}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85ae20df-2380-450b-994c-a7bc87a79681","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"85ae20df-2380-450b-994c-a7bc87a79681"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":479898089,"seconds":1785805109}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47866},"address":"10.132.0.13:47866"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"},"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"85ae20df-2380-450b-994c-a7bc87a79681"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":479898089,"seconds":1785805109},"url_path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47866","port":47866}}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-579628/ipp-route-579628\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-579628-sub"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","keyName":"e2e-ipp-579628","selected_subscription":"ipp-route-579628-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628-sub@ai-tenant-e2e-ipp-a-579628/ipp-route-579628","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m","name":"ipp-route-579628","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-579628-sub","namespace":"ai-tenant-e2e-ipp-a-579628","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ae20df-2380-450b-994c-a7bc87a79681","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ae20df-2380-450b-994c-a7bc87a79681","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"}
{"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"}
{"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"}
{"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"}
{"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"}
{"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"}