{"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"}
{"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"error","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"error","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"error","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"}
{"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"}
{"level":"error","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010890da-e441-4dcc-aeba-f164aa94772b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"010890da-e441-4dcc-aeba-f164aa94772b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010890da-e441-4dcc-aeba-f164aa94772b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":620019544},"http":{"id":"010890da-e441-4dcc-aeba-f164aa94772b","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"010890da-e441-4dcc-aeba-f164aa94772b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"010890da-e441-4dcc-aeba-f164aa94772b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":667165425},"http":{"id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":719612028},"http":{"id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33180","PortSpecifier":{"PortValue":33180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be02ad7a-7427-4688-9015-13a11cf5794a","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33180","PortSpecifier":{"PortValue":33180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709011,"nanos":786426409},"http":{"id":"be02ad7a-7427-4688-9015-13a11cf5794a","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6614a016-5866-429c-aab6-d9a68a7acaa9","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709012,"nanos":826001074},"http":{"id":"6614a016-5866-429c-aab6-d9a68a7acaa9","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":794264838},"http":{"id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78addb6b-0f88-4612-b62d-398e7271deca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78addb6b-0f88-4612-b62d-398e7271deca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78addb6b-0f88-4612-b62d-398e7271deca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":831024173},"http":{"id":"78addb6b-0f88-4612-b62d-398e7271deca","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78addb6b-0f88-4612-b62d-398e7271deca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78addb6b-0f88-4612-b62d-398e7271deca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":868851300},"http":{"id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57230","PortSpecifier":{"PortValue":57230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57230","PortSpecifier":{"PortValue":57230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709028,"nanos":909267903},"http":{"id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"936475fe-c761-4bbe-98c0-7e1d03eed122","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709029,"nanos":947357303},"http":{"id":"936475fe-c761-4bbe-98c0-7e1d03eed122","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34718","PortSpecifier":{"PortValue":34718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","method":"POST","path":"/ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5/v1/completions","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34718","PortSpecifier":{"PortValue":34718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709029,"nanos":983629246},"http":{"id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3XHD60LFGWP2DhAc_Rix0sv6KxsygZAr71hBkZPZf2ax2FrIHRwNhcLUkMDA"}
{"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3XHD60LFGWP2DhAc_Rix0sv6KxsygZAr71hBkZPZf2ax2FrIHRwNhcLUkMDA\"}"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"373db54f-d556-4840-8b79-bb25e2fba003","keyName":"e2e-rate-b-bd1a85","subscription":"e2e-rate-iso-b-bd1a85","tenant":"e2e-shared-b-4cfdb5","userId":"373db54f-d556-4840-8b79-bb25e2fba003","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\",\"requestedSubscription\":\"e2e-rate-iso-b-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4cfdb5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd1a85","namespace":"ai-tenant-e2e-shared-b-4cfdb5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bd1a85"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"373db54f-d556-4840-8b79-bb25e2fba003","keyName":"e2e-rate-b-bd1a85","selected_subscription":"e2e-rate-iso-b-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-b-4cfdb5/e2e-rate-iso-b-bd1a85@ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4cfdb5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd1a85","namespace":"ai-tenant-e2e-shared-b-4cfdb5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"}
{"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"}
{"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"}
{"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"}
{"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"}
{"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"}
{"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"}
{"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"}
{"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"}
{"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"}
{"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"}