{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"error","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:31:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:31:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"error","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}
{"level":"debug","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46402","PortSpecifier":{"PortValue":46402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":88832255},"http":{"id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f754e51-2be3-46ac-9393-f9b0d153a5d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":133872992},"http":{"id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57af41ef-c3f3-411c-8951-23f0f0c1e693","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46418","PortSpecifier":{"PortValue":46418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46418","PortSpecifier":{"PortValue":46418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061114,"nanos":176564512},"http":{"id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7de8a87-f86f-4b21-9b3f-30b91d4d73ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46430","PortSpecifier":{"PortValue":46430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46430","PortSpecifier":{"PortValue":46430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061115,"nanos":238094566},"http":{"id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ed89aa-03b1-454b-8c1b-05d294ce6a9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38caded2-23c0-464c-987a-23279d7e8009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46446","PortSpecifier":{"PortValue":46446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38caded2-23c0-464c-987a-23279d7e8009","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38caded2-23c0-464c-987a-23279d7e8009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46446","PortSpecifier":{"PortValue":46446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061116,"nanos":277926576},"http":{"id":"38caded2-23c0-464c-987a-23279d7e8009","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16wMnkhlJCS9qo9Ym_pHLL1LgPZEQv8SKlleyxW41ey1sP5rUKe8t1PxEd3zT\"}"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","subscription":"e2e-rate-iso-a-523651","tenant":"e2e-shared-a-fad346","userId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-523651\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38caded2-23c0-464c-987a-23279d7e8009","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-523651"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38caded2-23c0-464c-987a-23279d7e8009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2749f63-0c9a-4704-b1a6-7536213b12dd","keyName":"e2e-rate-a-523651","selected_subscription":"e2e-rate-iso-a-523651","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-523651@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-523651","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38caded2-23c0-464c-987a-23279d7e8009","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38caded2-23c0-464c-987a-23279d7e8009","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75b85c93-bd01-457d-bc19-46ce2746a13b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40174","PortSpecifier":{"PortValue":40174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":481326321},"http":{"id":"75b85c93-bd01-457d-bc19-46ce2746a13b","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b85c93-bd01-457d-bc19-46ce2746a13b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49798","PortSpecifier":{"PortValue":49798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49798","PortSpecifier":{"PortValue":49798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":522863649},"http":{"id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b493a126-93d9-4f0a-aba6-722485ebf057","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"]}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d1551d1038a5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7b2fc0ca-f5b0-4833-acf8-e3410d193dcf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b493a126-93d9-4f0a-aba6-722485ebf057","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da391e78-4c78-4cfb-afa9-c14b57f69fa9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdadf19a-9328-47e2-a7e8-a9693be59853","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061129,"nanos":557424712},"http":{"id":"fdadf19a-9328-47e2-a7e8-a9693be59853","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdadf19a-9328-47e2-a7e8-a9693be59853","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40202","PortSpecifier":{"PortValue":40202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061130,"nanos":600985493},"http":{"id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4a17d6c-a6da-41cf-9ed9-58eeadf62fd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","method":"POST","path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions","host":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061131,"nanos":638874457},"http":{"id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","method":"POST","headers":{":authority":"e2e-shared-a-fad346.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5QIwmBAkeGZxgsH_hnfuB1piXvLAkyAr4d1QP4su6xfKLhXq3Daxrjpd983\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","subscription":"e2e-rate-iso-a-e58278","tenant":"e2e-shared-a-fad346","userId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\",\"requestedSubscription\":\"e2e-rate-iso-a-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fad346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fad346/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"779722f9-55ae-442b-a94b-3e9d9be6f48d","keyName":"e2e-rate-a-e58278","selected_subscription":"e2e-rate-iso-a-e58278","selected_subscription_key":"ai-tenant-e2e-shared-a-fad346/e2e-rate-iso-a-e58278@ai-tenant-e2e-shared-a-fad346/rate-test-model-fad346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad346","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e58278","namespace":"ai-tenant-e2e-shared-a-fad346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f43c87d8-295a-4e42-ae3a-60bb2a06338b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","method":"POST","path":"/ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd/v1/completions","host":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784061131,"nanos":677630069},"http":{"id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","method":"POST","headers":{":authority":"e2e-shared-b-a99cbd.apps.74e8e4f1-6a83-4ec6-a055-d1551d1038a5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQaLFoyHklGyx2D7_reOe9R34SJWjoWerT5isR3dET1pmke586g4KVBEKAq0"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQaLFoyHklGyx2D7_reOe9R34SJWjoWerT5isR3dET1pmke586g4KVBEKAq0\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","keyName":"e2e-rate-b-e58278","subscription":"e2e-rate-iso-b-e58278","tenant":"e2e-shared-b-a99cbd","userId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\",\"requestedSubscription\":\"e2e-rate-iso-b-e58278\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a99cbd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a99cbd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e58278","namespace":"ai-tenant-e2e-shared-b-a99cbd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a99cbd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e58278"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7dc92061-7fb1-4845-a91d-f6c08a2c638f","keyName":"e2e-rate-b-e58278","selected_subscription":"e2e-rate-iso-b-e58278","selected_subscription_key":"ai-tenant-e2e-shared-b-a99cbd/e2e-rate-iso-b-e58278@ai-tenant-e2e-shared-b-a99cbd/rate-test-model-a99cbd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a99cbd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e58278","namespace":"ai-tenant-e2e-shared-b-a99cbd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:32:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40771a51-1893-4ad3-9a6c-a2cc96a2bae4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ba7660688714bd250e48f8bae37f3deeb04af86a4027d9aa5edc7007a5eec0"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50bd5b8386e2351cb0816cca2cefbc1ff5f528ab663997220ca738c496d70d63"}
{"level":"info","ts":"2026-07-14T20:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f33d3493073e2976c84e7cc8debd05290468835e0e271a177292a920f635328"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb36a8aa16a00b5d6281e855a41ee806598825330c5524a9438cc16c707670b"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da3d475427affdc094375b1c92e6da7771b68be725074efe8a4f0cc324e4a204"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4254312b3e35998c97ea3df66009e6797474e4ac14218ae6aaf317348900cd26"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c6f63f01ec2dd01e57a6fc53d63ac53bd6ae1c26769e6f8949e71f6669ae8b5"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bea430dc4204c3f06dae1d51e7bf7f3f3f6b1acf90e3a248513da6d6c587ad3"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7ab45d506e3e7d92692f1d3d92714584355b4aa5f3d7615973325fbbce101c"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b314929dc17d3ab5df4ffa59851434cc889a8e9a0c3675b391e3767f1d715cd7"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ca4c3902f5b3044182fbad65362b950799aae57ea9c96891638c30aa7e4813"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3ae7c625c9a10f6cb9a69b5d1362bab415bc2ba0b86fce1ad629f32bf0b6ed5"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65767d0cb62fdae51a3d1d6d5166dd23daf52480d702b22b209f92e68c913f08"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15787559344863e1452b845abdeacfaf2fb9468dd312c63f1de9ca4ea4d3dd86"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64cfad3c75f462deaa9aaa9201ac0f800f9ecb3d89fc34107ef0514b362c9f30"}
{"level":"info","ts":"2026-07-14T20:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcfe3d4225f9eabead511a8d37e274cb6c9f7310d9010ada9eacdbd6fb4bfb7d"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc75e1c23ea97109f129af80a38fb49556918c41c2236cc3a1fabba7ef5a8c10"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d36709e9570acdd50906f498cb9d41d4d590eb982bc2e0136401638df7fd0f13"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3282fc78a9689838584f51f0c4602c0ae542fdbdd53ff31b999eb43707cd1d2f"}
{"level":"info","ts":"2026-07-14T20:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f20604ee749c31b2247081ab2aa1ef2534147a0caefce47775fd7341543e6b5"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e735167db7e9915aee6df88066d301261c856b640321a3420d249dcc5a4e9a8"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9224d8eb7ace98378bec0d09cfd8eb14f358203ebc18421e6b399e2b10c588"}
{"level":"info","ts":"2026-07-14T20:33:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c897708f8261c36d93c752c0e4fa5b7b63d2a71eb650c541050f44a7e72b70af"}
{"level":"info","ts":"2026-07-14T20:33:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad3088b20e4cc0f487915a96c446ca714ce2dc0f3c61dc183b07b4f2ae2c5377"}