{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef77041584c0e9f5b22c4e90cf4c8b1ecab27074f09c641257f06f053a7cc28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef77041584c0e9f5b22c4e90cf4c8b1ecab27074f09c641257f06f053a7cc28"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738"}
{"level":"error","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"error","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738"}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58424","PortSpecifier":{"PortValue":58424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","object":"source:{address:{socket_address:{address:\"10.132.0.13:58424\"  port_value:58424}}}  destination:{address:{socket_address:{address:\"10.133.0.78:443\"  port_value:443}}}  request:{time:{seconds:1785454803  nanos:828720525}  http:{id:\"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdC03OWY2YmJmY2RkLXY5azRrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b7dd3182fd163666db3c23296853d28453cc7026434e3ecc82a4053aa123a858\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b7dd3182fd163666db3c23296853d28453cc7026434e3ecc82a4053aa123a858"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.78:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":828720525,"seconds":1785454803}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58424},"address":"10.132.0.13:58424"}}}}},"destination":{"address":"10.133.0.78:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b7dd3182fd163666db3c23296853d28453cc7026434e3ecc82a4053aa123a858"},"headers":{":authority":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":828720525,"seconds":1785454803},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58424","port":58424}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b20ef0-eb51-4319-8b42-3fc8a6f30c2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51026","PortSpecifier":{"PortValue":51026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","object":"source:{address:{socket_address:{address:\"10.132.0.13:51026\"  port_value:51026}}}  destination:{address:{socket_address:{address:\"10.133.0.81:443\"  port_value:443}}}  request:{time:{seconds:1785454803  nanos:866387980}  http:{id:\"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01"},"host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":866387980,"seconds":1785454803}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51026},"address":"10.132.0.13:51026"}}}}},"destination":{"address":"10.133.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95"},"headers":{":authority":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01"},"host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":866387980,"seconds":1785454803},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51026","port":51026}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f6f660/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8ee64c1-5a0e-422d-8ef1-02fa555f1c01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58426","PortSpecifier":{"PortValue":58426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"711e78dd-1414-45e8-9d48-99eb897c8525","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","object":"source:{address:{socket_address:{address:\"10.132.0.13:58426\"  port_value:58426}}}  destination:{address:{socket_address:{address:\"10.133.0.78:443\"  port_value:443}}}  request:{time:{seconds:1785454803  nanos:910781780}  http:{id:\"711e78dd-1414-45e8-9d48-99eb897c8525\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"711e78dd-1414-45e8-9d48-99eb897c8525\"}  path:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"  host:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZZmpkno09vJxQ4UN_DOijCjr8OEAxsFbBOUATe1Po5d3dzwtG8qVLyxW7fEV"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","subscription":"e2e-rate-iso-a-23cbce","tenant":"e2e-shared-a-5049e4","userId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdC03OWY2YmJmY2RkLXY5azRrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"711e78dd-1414-45e8-9d48-99eb897c8525"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"711e78dd-1414-45e8-9d48-99eb897c8525","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":910781780,"seconds":1785454803}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58426},"address":"10.132.0.13:58426"}}}}},"destination":{"address":"10.133.0.78:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14"},"headers":{":authority":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"711e78dd-1414-45e8-9d48-99eb897c8525"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"711e78dd-1414-45e8-9d48-99eb897c8525","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":910781780,"seconds":1785454803},"url_path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58426","port":58426}}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-23cbce"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","selected_subscription":"e2e-rate-iso-a-23cbce","selected_subscription_key":"ai-tenant-e2e-shared-a-5049e4/e2e-rate-iso-a-23cbce@ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711e78dd-1414-45e8-9d48-99eb897c8525","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58440","PortSpecifier":{"PortValue":58440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","object":"source:{address:{socket_address:{address:\"10.132.0.13:58440\"  port_value:58440}}}  destination:{address:{socket_address:{address:\"10.133.0.78:443\"  port_value:443}}}  request:{time:{seconds:1785454804  nanos:949852262}  http:{id:\"573130a9-a7b9-4e26-a0c6-316a67a26ebe\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdC03OWY2YmJmY2RkLXY5azRrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"573130a9-a7b9-4e26-a0c6-316a67a26ebe\"}  path:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"  host:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZZmpkno09vJxQ4UN_DOijCjr8OEAxsFbBOUATe1Po5d3dzwtG8qVLyxW7fEV"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","subscription":"e2e-rate-iso-a-23cbce","tenant":"e2e-shared-a-5049e4","userId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdC03OWY2YmJmY2RkLXY5azRrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTUwNDllNC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS01MDQ5ZTQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":949852262,"seconds":1785454804}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58440},"address":"10.132.0.13:58440"}}}}},"destination":{"address":"10.133.0.78:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14"},"headers":{":authority":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":949852262,"seconds":1785454804},"url_path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58440","port":58440}}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-23cbce"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","selected_subscription":"e2e-rate-iso-a-23cbce","selected_subscription_key":"ai-tenant-e2e-shared-a-5049e4/e2e-rate-iso-a-23cbce@ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573130a9-a7b9-4e26-a0c6-316a67a26ebe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58444","PortSpecifier":{"PortValue":58444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.78:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c5795c3-6e7f-461c-993c-ace1749174f6","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","object":"source:{address:{socket_address:{address:\"10.132.0.13:58444\"  port_value:58444}}}  destination:{address:{socket_address:{address:\"10.133.0.78:443\"  port_value:443}}}  request:{time:{seconds:1785454805  nanos:989133433}  http:{id:\"2c5795c3-6e7f-461c-993c-ace1749174f6\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"2c5795c3-6e7f-461c-993c-ace1749174f6\"}  path:\"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions\"  host:\"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZZmpkno09vJxQ4UN_DOijCjr8OEAxsFbBOUATe1Po5d3dzwtG8qVLyxW7fEV"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","subscription":"e2e-rate-iso-a-23cbce","tenant":"e2e-shared-a-5049e4","userId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5049e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2c5795c3-6e7f-461c-993c-ace1749174f6"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"2c5795c3-6e7f-461c-993c-ace1749174f6","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":989133433,"seconds":1785454805}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58444},"address":"10.132.0.13:58444"}}}}},"destination":{"address":"10.133.0.78:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14"},"headers":{":authority":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5049e4-kserve-workload-svc.ai-tenant-e2e-shared-a-5049e4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.78~e2e-shared-a-5049e4-openshift-default-79f6bbfcdd-v9k4k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2c5795c3-6e7f-461c-993c-ace1749174f6"},"host":"e2e-shared-a-5049e4.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"2c5795c3-6e7f-461c-993c-ace1749174f6","method":"POST","path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":989133433,"seconds":1785454805},"url_path":"/ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58444","port":58444}}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-23cbce"}
{"level":"debug","ts":"2026-07-30T23:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4b01203-611f-4c3e-a060-5ffbbeacd1ef","keyName":"e2e-rate-a-23cbce","selected_subscription":"e2e-rate-iso-a-23cbce","selected_subscription_key":"ai-tenant-e2e-shared-a-5049e4/e2e-rate-iso-a-23cbce@ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-5049e4/models/facebook/opt-125m","name":"rate-test-model-5049e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-23cbce","namespace":"ai-tenant-e2e-shared-a-5049e4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5049e4/rate-test-model-5049e4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5795c3-6e7f-461c-993c-ace1749174f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71222e11-eb34-489d-9362-f066271f6e9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51040","PortSpecifier":{"PortValue":51040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71222e11-eb34-489d-9362-f066271f6e9a","method":"POST","path":"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions","host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71222e11-eb34-489d-9362-f066271f6e9a","object":"source:{address:{socket_address:{address:\"10.132.0.13:51040\"  port_value:51040}}}  destination:{address:{socket_address:{address:\"10.133.0.81:443\"  port_value:443}}}  request:{time:{seconds:1785454806  nanos:27782089}  http:{id:\"71222e11-eb34-489d-9362-f066271f6e9a\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-f6f660-kserve-workload-svc.ai-tenant-e2e-shared-b-f6f660.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNmY2NjAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY2ZjY2MC1vcGVuc2hpZnQtZGVmYXVsdC03NGI4ZGM5ZGI0LXRzOWpnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY2ZjY2MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNmY2NjAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"71222e11-eb34-489d-9362-f066271f6e9a\"}  path:\"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions\"  host:\"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NpzUsMEC5ydM48vo_RKAuenGlCW0fkqC0j6U0nQikqQMFmw0I2gZuLIES4jW"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9889ac41-7aed-4362-9a41-5e499314d096","keyName":"e2e-rate-b-23cbce","subscription":"e2e-rate-iso-b-23cbce","tenant":"e2e-shared-b-f6f660","userId":"9889ac41-7aed-4362-9a41-5e499314d096","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f6f660.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f6f660/models/facebook/opt-125m","name":"rate-test-model-f6f660","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-23cbce","namespace":"ai-tenant-e2e-shared-b-f6f660","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660"}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71222e11-eb34-489d-9362-f066271f6e9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f6f660-kserve-workload-svc.ai-tenant-e2e-shared-b-f6f660.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"71222e11-eb34-489d-9362-f066271f6e9a"},"host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"71222e11-eb34-489d-9362-f066271f6e9a","method":"POST","path":"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":27782089,"seconds":1785454806}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51040},"address":"10.132.0.13:51040"}}}}},"destination":{"address":"10.133.0.81:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"},"headers":{":authority":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f6f660-kserve-workload-svc.ai-tenant-e2e-shared-b-f6f660.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.81~e2e-shared-b-f6f660-openshift-default-74b8dc9db4-ts9jg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"71222e11-eb34-489d-9362-f066271f6e9a"},"host":"e2e-shared-b-f6f660.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"71222e11-eb34-489d-9362-f066271f6e9a","method":"POST","path":"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":27782089,"seconds":1785454806},"url_path":"/ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51040","port":51040}}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f6f660/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-23cbce"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71222e11-eb34-489d-9362-f066271f6e9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9889ac41-7aed-4362-9a41-5e499314d096","keyName":"e2e-rate-b-23cbce","selected_subscription":"e2e-rate-iso-b-23cbce","selected_subscription_key":"ai-tenant-e2e-shared-b-f6f660/e2e-rate-iso-b-23cbce@ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f6f660/models/facebook/opt-125m","name":"rate-test-model-f6f660","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-23cbce","namespace":"ai-tenant-e2e-shared-b-f6f660","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f6f660/rate-test-model-f6f660"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71222e11-eb34-489d-9362-f066271f6e9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71222e11-eb34-489d-9362-f066271f6e9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2ae0185085faca286d328f68f34e0da79b5bdb3cf71e51dd7117e24a67f54f"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34867a555b3a1134751d5340d4ea10e41ea60cd30558ebb4b83f87c48c3e263a"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2574a0b9d7aa92ce74c3d53dbfd165a86669a97563bb7209f415747027cb6c3b"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e965b67e6916d1c0d5852951b9411dc7d69c3dec4ce419e516fe3f6af3cdad"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e77b39023284673cd4c825976875f801e5632e99d0a98f2bf5bab386e8813f95"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c1127a0623a5799f4094308fd2a6cb4122974bb76ebc92c96dcff4ee36ab95a"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7dd3182fd163666db3c23296853d28453cc7026434e3ecc82a4053aa123a858"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1741f4f8d073f4355efeb5c87e6b51ce69f23b0813f175238c0f92bfad8d5396"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33153d05c8cf2745f724a8752be42f53d695a370acd693cbdc1c13cf146d5293"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fa594e90fa50984f4ae36a2a11460c7b50f54ecaed454af2646efab9f41138c"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da8efda1d5a601729709c08c9eefdce34426fc5fe4643aedc5da60448193169c"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ab3e63f86ab167657a806930b943e8473742b029d32614e1f684b316940eac"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a00e89a51f76af6c65ee414d58ec7a31525d99c6c0f89aacfb64ef186dd08820"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef77041584c0e9f5b22c4e90cf4c8b1ecab27074f09c641257f06f053a7cc28"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c233562aa146221f7d04fa138887ab75b06b2b59d895b46fa61d051b8d741bc"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4927bc3f5152940513b74020e61370722e88ee4bcf33ea82b3827ac6379b2dc"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbeab4d0d482f0d6bbd7794db7f5aa107332d619da8175106beda0f379c81738"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8ee1f42bb58607d71330d2374a318da278d802e4d49e61518a2a55b05469bae"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac7466221ad02141a9662a134ab5561aca9ad12a18271b99bf004d6c4c2bb6a"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34f63c10d6498bf71afd31296c02cb95a701510e388e667d14ff47319e1784c8"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b21c06573e15ab4d04e5e17fbb71deba7b161ca7c1ae7f436d04d14148a2385"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b763adbadd1efea31efa1aeac0995fc1e326f81b48c2c57f1a34864f05ce8c14"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79ce9eb09711458c5a7bc3911851f460f28e5581f1736054a768f1cbce0965bd"}
{"level":"info","ts":"2026-07-30T23:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8040a258c84a7e5d76f6bf211f1a97c35a967172bf759ece85d3caacab2550b"}
{"level":"info","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35934","PortSpecifier":{"PortValue":35934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","object":"source:{address:{socket_address:{address:\"10.132.0.13:35934\"  port_value:35934}}}  destination:{address:{socket_address:{address:\"10.133.0.37:443\"  port_value:443}}}  request:{time:{seconds:1785454892  nanos:997935702}  http:{id:\"3005a2eb-b5fc-4416-9eb0-a401906efb24\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"3005a2eb-b5fc-4416-9eb0-a401906efb24\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3005a2eb-b5fc-4416-9eb0-a401906efb24"},"host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":997935702,"seconds":1785454892}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35934},"address":"10.132.0.13:35934"}}}}},"destination":{"address":"10.133.0.37:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3005a2eb-b5fc-4416-9eb0-a401906efb24"},"host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":997935702,"seconds":1785454892},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:35934","port":35934}}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3005a2eb-b5fc-4416-9eb0-a401906efb24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35946","PortSpecifier":{"PortValue":35946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44fb61a7-f151-4717-ab7e-f897eae00f22","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","object":"source:{address:{socket_address:{address:\"10.132.0.13:35946\"  port_value:35946}}}  destination:{address:{socket_address:{address:\"10.133.0.37:443\"  port_value:443}}}  request:{time:{seconds:1785454893  nanos:52284231}  http:{id:\"44fb61a7-f151-4717-ab7e-f897eae00f22\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"44fb61a7-f151-4717-ab7e-f897eae00f22\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XSmcZp9RG6EMPcWg_S9rfBS5eLVWA6AXjgCY0xdj8gVf21IZm1jY17S4MYlW"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a96e11a5-6bd6-47a3-9a35-163210aa6f2f","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a96e11a5-6bd6-47a3-9a35-163210aa6f2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"44fb61a7-f151-4717-ab7e-f897eae00f22"},"host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"44fb61a7-f151-4717-ab7e-f897eae00f22","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":52284231,"seconds":1785454893}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35946},"address":"10.132.0.13:35946"}}}}},"destination":{"address":"10.133.0.37:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.37~maas-default-gateway-openshift-default-78bb78ff78-fkxvs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"44fb61a7-f151-4717-ab7e-f897eae00f22"},"host":"maas.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"44fb61a7-f151-4717-ab7e-f897eae00f22","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":52284231,"seconds":1785454893},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:35946","port":35946}}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a96e11a5-6bd6-47a3-9a35-163210aa6f2f","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44fb61a7-f151-4717-ab7e-f897eae00f22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d"}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5"}
{"level":"error","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493"}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T23:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"}
{"level":"info","ts":"2026-07-30T23:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493"}
{"level":"info","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45524","PortSpecifier":{"PortValue":45524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71e9f9c6-f72c-4616-969d-18490ada8da5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","object":"source:{address:{socket_address:{address:\"10.132.0.13:45524\"  port_value:45524}}}  destination:{address:{socket_address:{address:\"10.133.0.84:443\"  port_value:443}}}  request:{time:{seconds:1785454940  nanos:855595386}  http:{id:\"71e9f9c6-f72c-4616-969d-18490ada8da5\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"71e9f9c6-f72c-4616-969d-18490ada8da5\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/34759c28222a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ddf815fe-89fd-4d54-b882-1175ca38d291"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ecb39130-c4fd-4f1f-a380-be8ad1a58554","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.84:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"71e9f9c6-f72c-4616-969d-18490ada8da5"},"host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"71e9f9c6-f72c-4616-969d-18490ada8da5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":855595386,"seconds":1785454940}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45524},"address":"10.132.0.13:45524"}}}}},"destination":{"address":"10.133.0.84:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"},"headers":{":authority":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0wNWQ3MGQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTA1ZDcwZC1vcGVuc2hpZnQtZGVmYXVsdC01ZmY2NjU4N2I2LXo0cm1rCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTA1ZDcwZC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0wNWQ3MGQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"71e9f9c6-f72c-4616-969d-18490ada8da5"},"host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"71e9f9c6-f72c-4616-969d-18490ada8da5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":855595386,"seconds":1785454940},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:45524","port":45524}}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-05d70d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e9f9c6-f72c-4616-969d-18490ada8da5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e974659-e391-4565-b0eb-9f02bec92597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49016","PortSpecifier":{"PortValue":49016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e974659-e391-4565-b0eb-9f02bec92597","method":"POST","path":"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions","host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e974659-e391-4565-b0eb-9f02bec92597","object":"source:{address:{socket_address:{address:\"10.132.0.13:49016\"  port_value:49016}}}  destination:{address:{socket_address:{address:\"10.133.0.84:443\"  port_value:443}}}  request:{time:{seconds:1785454942  nanos:919484833}  http:{id:\"2e974659-e391-4565-b0eb-9f02bec92597\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-05d70d-kserve-workload-svc.ai-tenant-e2e-ipp-a-05d70d.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"2e974659-e391-4565-b0eb-9f02bec92597\"}  path:\"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions\"  host:\"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ngLd9T4QEHOEVN11_GGDTXHFRTvYRLsgm3PhP9WDnMJycxUkRGZewzSn8z6H"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbac7916-9bf5-4ff1-9f2e-c126360fa6e8","keyName":"e2e-ipp-05d70d","subscription":"ipp-route-05d70d-sub","tenant":"e2e-ipp-a-05d70d","userId":"dbac7916-9bf5-4ff1-9f2e-c126360fa6e8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-05d70d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-05d70d/models/facebook/opt-125m","name":"ipp-route-05d70d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-05d70d-sub","namespace":"ai-tenant-e2e-ipp-a-05d70d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d"}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e974659-e391-4565-b0eb-9f02bec92597","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-05d70d-kserve-workload-svc.ai-tenant-e2e-ipp-a-05d70d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2e974659-e391-4565-b0eb-9f02bec92597"},"host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"2e974659-e391-4565-b0eb-9f02bec92597","method":"POST","path":"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":919484833,"seconds":1785454942}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49016},"address":"10.132.0.13:49016"}}}}},"destination":{"address":"10.133.0.84:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"},"headers":{":authority":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-05d70d-kserve-workload-svc.ai-tenant-e2e-ipp-a-05d70d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.84~e2e-ipp-a-05d70d-openshift-default-5ff66587b6-z4rmk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2e974659-e391-4565-b0eb-9f02bec92597"},"host":"e2e-ipp-a-05d70d.apps.b0ebd4e1-376e-444b-b1aa-34759c28222a.prod.konfluxeaas.com","id":"2e974659-e391-4565-b0eb-9f02bec92597","method":"POST","path":"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":919484833,"seconds":1785454942},"url_path":"/ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:49016","port":49016}}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-05d70d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-05d70d-sub"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e974659-e391-4565-b0eb-9f02bec92597","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dbac7916-9bf5-4ff1-9f2e-c126360fa6e8","keyName":"e2e-ipp-05d70d","selected_subscription":"ipp-route-05d70d-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d-sub@ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-05d70d/models/facebook/opt-125m","name":"ipp-route-05d70d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-05d70d-sub","namespace":"ai-tenant-e2e-ipp-a-05d70d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-05d70d/ipp-route-05d70d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e974659-e391-4565-b0eb-9f02bec92597","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-30T23:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e974659-e391-4565-b0eb-9f02bec92597","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1523b702f1f6348a7ea1a046153550bbad08bcae6d80c87002a8401c60a3af9d"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbef46135865e6659f1635b9e56b2edc3fc7de74bfc476ec1f4bef00446b6493"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53733c991bfba20c1264df905f7d78a18da7eb070368e591dd7d8670f0eead00"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31a24402f77afedac02cbc6a2e3a52e6d643c62b4d5a754b692f73e7cfa7888f"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c67b4f4b97717164095fa0dfdb87f1c38121668118cf246b54c36c6bf19c1d95"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/187abe38f4f2e37737671f702151a70ad94dba4b0e6ab5092f060baf06dbf992"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b16787ab057d409a36abf90361dc945c4622ce8649635961976b199f1ee7805"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21a95337c5a9d95d54b97272f8e2881bb5b29c8efa840968cafcf11fd2cea235"}
{"level":"info","ts":"2026-07-30T23:43:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6c2312ddae5e773b83562fe27f73f0d13bfaf0633e0f2c2ab194749c1561739"}
{"level":"info","ts":"2026-07-30T23:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dd7569506320f7dca87a651f82d20d9c6337cb66fcfc804d4f3672a88006238"}
{"level":"info","ts":"2026-07-30T23:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8075fc1bafeeec3e979a3bd5fd82d8de2c5273c3c6bd7a8c5be2b0d333091c35"}
{"level":"info","ts":"2026-07-30T23:43:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e60e213874fb3334b6b20dbf8fffa849861827fc207dda9622c34e38e217f5"}