{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25b998efa7ae281034c5e990ae4e55d905f24f6599d5b5abca9468fe5347b009"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1c7ecaee9beb19f14cadb966e41a21e378406ddb995d03fab27329a4b6ff789"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/968a87df48be31cc2ac1398efef99194a88b0460e50672c19c058196cbf7c4d7"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbee213f5627911e33719466ebee0a029df1933db0c02f0be159dc8192cade26"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8cfc22c691cefbb2ba0158234ce01ead68e572b95c9db15761efa629c17b106"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be7fb232ef3b9dcfa06d7af1f1b6a650e76a7242143dca4ef8139048b02df7fd"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afae76d6eff8db20db3915cf274094d8c71a34061ec301a0ee70dba5538454fe"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa5d4d92ab5bdd23b032120850ed8439c8e8b0a0ceb2f90f6809ef3a0d23c8c"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/496b835f79c6036d2c3c6b02fc5f73c2d3c9de0cd1d4962925a3f5abbcf21e7d"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e2abdad6dea02746db049355dc1cd57dac368b4006610ac64b062c1ffcb7e54"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b1ac33fe0e9133f5e9a8e744e3c94d45dd2d1d6ed3118ff09ce0012fbcaaa82"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1885be818ba2b72a20fc4d54761172e3432ab000155aa6708b1c6c215d00596c"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/658ec70fa863099f19091cf6e1dba8c4bde3636f0c0408ff35734e827ecb2b62"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c14432c73b1cf267521c055a46e4c5f231f7fea1b185fedbd86d06e24a67acbf"}
{"level":"info","ts":"2026-07-23T18:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea5cc9a1298b5a6166a082f3df5818acf8a1f0eea322d86301c540b0940a45f"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a"}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"error","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ba45c9-fd68-482c-9a59-74954109025f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39360","PortSpecifier":{"PortValue":39360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87ba45c9-fd68-482c-9a59-74954109025f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87ba45c9-fd68-482c-9a59-74954109025f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39360","PortSpecifier":{"PortValue":39360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832137,"nanos":788635676},"http":{"id":"87ba45c9-fd68-482c-9a59-74954109025f","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87ba45c9-fd68-482c-9a59-74954109025f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"]}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87ba45c9-fd68-482c-9a59-74954109025f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87ba45c9-fd68-482c-9a59-74954109025f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ba45c9-fd68-482c-9a59-74954109025f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87ba45c9-fd68-482c-9a59-74954109025f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44686","PortSpecifier":{"PortValue":44686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832137,"nanos":832894850},"http":{"id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","method":"POST","headers":{":authority":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"]}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f5044c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2986498-8a1c-4a05-a6dc-63cd784906ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39372","PortSpecifier":{"PortValue":39372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39372","PortSpecifier":{"PortValue":39372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832137,"nanos":876691149},"http":{"id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx\"}"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","subscription":"e2e-rate-iso-a-0a8e8c","tenant":"e2e-shared-a-e94d59","userId":"f6603004-3e39-4e89-8723-b03ac8ef072d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-0a8e8c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a8e8c"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","selected_subscription":"e2e-rate-iso-a-0a8e8c","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-0a8e8c@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fa8b893-dc06-4db2-94a3-c1ab65c0e498","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39382","PortSpecifier":{"PortValue":39382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39382","PortSpecifier":{"PortValue":39382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832138,"nanos":937910000},"http":{"id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx\"}"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","subscription":"e2e-rate-iso-a-0a8e8c","tenant":"e2e-shared-a-e94d59","userId":"f6603004-3e39-4e89-8723-b03ac8ef072d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-0a8e8c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a8e8c"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","selected_subscription":"e2e-rate-iso-a-0a8e8c","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-0a8e8c@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b557f85-e836-4b8e-9ce7-2d67b0a0e813","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45738","PortSpecifier":{"PortValue":45738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45738","PortSpecifier":{"PortValue":45738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832139,"nanos":981691550},"http":{"id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eMrWYT3jkBwFIfey_KMHTcHuEUzeyt0OAHjS4UP2JnP0kTp3jcn7vNArHpHx\"}"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","subscription":"e2e-rate-iso-a-0a8e8c","tenant":"e2e-shared-a-e94d59","userId":"f6603004-3e39-4e89-8723-b03ac8ef072d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-0a8e8c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a8e8c"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6603004-3e39-4e89-8723-b03ac8ef072d","keyName":"e2e-rate-a-0a8e8c","selected_subscription":"e2e-rate-iso-a-0a8e8c","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-0a8e8c@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a8e8c","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a02a376-bf8b-4c2e-9354-e0d0424de66e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33776","PortSpecifier":{"PortValue":33776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6691c911-4606-49c4-9e6d-3635e5a634f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33776","PortSpecifier":{"PortValue":33776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832153,"nanos":54133223},"http":{"id":"6691c911-4606-49c4-9e6d-3635e5a634f1","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"]}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6691c911-4606-49c4-9e6d-3635e5a634f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60816","PortSpecifier":{"PortValue":60816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60816","PortSpecifier":{"PortValue":60816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832153,"nanos":92065661},"http":{"id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","method":"POST","headers":{":authority":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"]}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f5cd2df351d4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6502b1e3-e483-404d-988e-a5b4bd9ade6d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"efac8e37-a589-42e4-82d5-dd5e3acd5573","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f5044c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3606ea6-4cad-4dec-a99e-ad8c65197107","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f91537a9-5503-4414-aad1-9c5196365208","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33788","PortSpecifier":{"PortValue":33788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f91537a9-5503-4414-aad1-9c5196365208","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f91537a9-5503-4414-aad1-9c5196365208","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33788","PortSpecifier":{"PortValue":33788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832153,"nanos":128897670},"http":{"id":"f91537a9-5503-4414-aad1-9c5196365208","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y\"}"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","subscription":"e2e-rate-iso-a-dafbba","tenant":"e2e-shared-a-e94d59","userId":"9588153f-c84a-491f-9abb-922b6b2c7a48","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-dafbba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f91537a9-5503-4414-aad1-9c5196365208","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dafbba"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f91537a9-5503-4414-aad1-9c5196365208","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","selected_subscription":"e2e-rate-iso-a-dafbba","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-dafbba@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f91537a9-5503-4414-aad1-9c5196365208","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f91537a9-5503-4414-aad1-9c5196365208","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2524be12-0b67-487d-ab47-921af3db6362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33804","PortSpecifier":{"PortValue":33804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2524be12-0b67-487d-ab47-921af3db6362","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2524be12-0b67-487d-ab47-921af3db6362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33804","PortSpecifier":{"PortValue":33804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832154,"nanos":167809611},"http":{"id":"2524be12-0b67-487d-ab47-921af3db6362","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y\"}"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","subscription":"e2e-rate-iso-a-dafbba","tenant":"e2e-shared-a-e94d59","userId":"9588153f-c84a-491f-9abb-922b6b2c7a48","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-dafbba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2524be12-0b67-487d-ab47-921af3db6362","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dafbba"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2524be12-0b67-487d-ab47-921af3db6362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","selected_subscription":"e2e-rate-iso-a-dafbba","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-dafbba@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2524be12-0b67-487d-ab47-921af3db6362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2524be12-0b67-487d-ab47-921af3db6362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"775e073e-f898-4e05-9df9-1f97fabdc892","method":"POST","path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions","host":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33814","PortSpecifier":{"PortValue":33814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832155,"nanos":206235305},"http":{"id":"775e073e-f898-4e05-9df9-1f97fabdc892","method":"POST","headers":{":authority":"e2e-shared-a-e94d59.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AccjOuddR2Q7M2ag_Z488mRTG9qXpRDya1YQK8h5LAePUArcSrdCTEKWCk2Y\"}"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","subscription":"e2e-rate-iso-a-dafbba","tenant":"e2e-shared-a-e94d59","userId":"9588153f-c84a-491f-9abb-922b6b2c7a48","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\",\"requestedSubscription\":\"e2e-rate-iso-a-dafbba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e94d59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e94d59/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dafbba"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9588153f-c84a-491f-9abb-922b6b2c7a48","keyName":"e2e-rate-a-dafbba","selected_subscription":"e2e-rate-iso-a-dafbba","selected_subscription_key":"ai-tenant-e2e-shared-a-e94d59/e2e-rate-iso-a-dafbba@ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94d59","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dafbba","namespace":"ai-tenant-e2e-shared-a-e94d59","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e94d59/rate-test-model-e94d59"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775e073e-f898-4e05-9df9-1f97fabdc892","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60830","PortSpecifier":{"PortValue":60830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","method":"POST","path":"/ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c/v1/completions","host":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60830","PortSpecifier":{"PortValue":60830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832155,"nanos":242579367},"http":{"id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","method":"POST","headers":{":authority":"e2e-shared-b-f5044c.apps.b1c9165b-89b8-46ed-8894-f5cd2df351d4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1If4Amgy9Bpc4oOR_MJKcSXSMfYy5uIrt5hxvfWzgiaiuLiYLpGR4bbzmM4M"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f5044c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1If4Amgy9Bpc4oOR_MJKcSXSMfYy5uIrt5hxvfWzgiaiuLiYLpGR4bbzmM4M\"}"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f5044c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f5a3df8-6019-45bb-9748-ba21ec26d92f","keyName":"e2e-rate-b-dafbba","subscription":"e2e-rate-iso-b-dafbba","tenant":"e2e-shared-b-f5044c","userId":"3f5a3df8-6019-45bb-9748-ba21ec26d92f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f5044c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c\",\"requestedSubscription\":\"e2e-rate-iso-b-dafbba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f5044c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5044c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dafbba","namespace":"ai-tenant-e2e-shared-b-f5044c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c"}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f5044c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dafbba"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3f5a3df8-6019-45bb-9748-ba21ec26d92f","keyName":"e2e-rate-b-dafbba","selected_subscription":"e2e-rate-iso-b-dafbba","selected_subscription_key":"ai-tenant-e2e-shared-b-f5044c/e2e-rate-iso-b-dafbba@ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5044c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dafbba","namespace":"ai-tenant-e2e-shared-b-f5044c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f5044c/rate-test-model-f5044c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadd02d3-c152-4c51-b7fd-3f686dcaf349","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5d29da83c92dd5c888fb969c82699877edb00cc885e7c0808db38ae1d6100b"}
{"level":"info","ts":"2026-07-23T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1b6576dadac29c0c94665d2a6ac59be0267eefec1f9967e7e9f01daf98c31a"}
{"level":"info","ts":"2026-07-23T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ebc50fbc159f2a8e15601a70e94b1faa7351e499ccbc0cb30f4df72afa79448"}
{"level":"info","ts":"2026-07-23T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8edaec1e83c057f2dce98acd5c05902b875aa34bacc252229a3129eff61383a"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/909c1b9eb344557e9d7ab089baea18b11d1545bdac4a9d52105ede21d74d9884"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e4457a2ca0dade3aa902f1d2f0eb0332de7e665b5bd822ff68ba47528d4619f"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/229bc999fce91101f13be06d6703aec1f52df2f1fd7b234ff681d50e9d040017"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdad220d5b6fb08fb0d66b1b39b028b203fcaf88733d369193f5fddc43d60ff6"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adce86b6cdf3d7f47d15675c7d474a30c53c653d5d5fba96723c7a0359d97632"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8252942f4d60a7ae00f089b5039876ec93bf9c0339fd8a0b8c8a6b07f7ba54a"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f810e580219bfeb310815faf14c9e2910aacb9c70b1930c0b27658988a0ff6d9"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edfc830f79b88d11c8c0156fe06e6220973fb4b4f3952edac9a91994845e894e"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa420f5cbf4f70f89063c49d3c6fa436d024b296bbb9edecfbb7cdf24e66eeb"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c72e6765b57d519d0d500d496ff6cab86c5a7a0f969209038d3cd32cb9863a9"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36bcd8e7d6da1245749fbba95ceec7ca89f3ccff8eb519f3ec73927f59292177"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec1693ae38c086ccdaff1cb1174c8387fc05a585a94c35b8580f9e9b7da123d"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d9879990dac24c606ae721089b22de0b592366fcd1ae2b259b38625b0adfe1"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f254807fdea2831e853befeb9b31bbffbc6b8381cd59b58f3d243526e8f88cb"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ba24230780fab6689976b755b9147aae71ddff819ad35ed29d4eed05e94a716"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/924956fc3ea2477e663f731868f9e5496bd0b383a5f62d9e76ec7c437ddf5d42"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06e2277a3b9a4206a935faf3d8204652ae970f5e729a81828074f66397bf447c"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6757b16c68937bf1bd2b64b9ba55f8fe61f84ad979085386cbc4545b4dd17f01"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fb4815551fb30f3a84cb9a59a5d552c523dd0082851b05ab0e2e0217c9785fc"}
{"level":"info","ts":"2026-07-23T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/775a8b7a8394c3c2da904837cd26b87d4eca96e92f5a25f63b3b16b84abf2728"}