{"level":"info","ts":"2026-07-19T17:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddb3fd13246db4d0eb6691d2d854faf42a36f123016af9025572f967230ff919"}
{"level":"info","ts":"2026-07-19T17:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a435c1ef4775d23e3f1156bbb4e530d22ad9d587ee08d189419fe44b478f7b59"}
{"level":"info","ts":"2026-07-19T17:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0c383a992fb9b2f455b312e0c0bc30e3d07bd039e791f3861b60dbe7c134f90"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"debug","ts":"2026-07-19T17:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"}
{"level":"error","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"error","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7"}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7"}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3"}
{"level":"info","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3"}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-19T17:27:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-19T17:27:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47348","PortSpecifier":{"PortValue":47348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47348","PortSpecifier":{"PortValue":47348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482023,"nanos":577157449},"http":{"id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"]}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc60487b-4b91-47b5-b63a-c6dbb1c78697","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482023,"nanos":617782123},"http":{"id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","method":"POST","headers":{":authority":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"]}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0fa4bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8194fbcc-3f16-4ace-a6e4-7c63f46516b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47358","PortSpecifier":{"PortValue":47358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:47358","PortSpecifier":{"PortValue":47358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482023,"nanos":660411806},"http":{"id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE\"}"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","subscription":"e2e-rate-iso-a-8201f1","tenant":"e2e-shared-a-8d2863","userId":"7a69b295-18c9-4168-b309-24b61d9b47eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-8201f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8201f1"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","selected_subscription":"e2e-rate-iso-a-8201f1","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-8201f1@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3fa4418-80a2-4b2b-9962-364b710b8f86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:37982","PortSpecifier":{"PortValue":37982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:37982","PortSpecifier":{"PortValue":37982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482024,"nanos":755094847},"http":{"id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE\"}"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","subscription":"e2e-rate-iso-a-8201f1","tenant":"e2e-shared-a-8d2863","userId":"7a69b295-18c9-4168-b309-24b61d9b47eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-8201f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8201f1"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","selected_subscription":"e2e-rate-iso-a-8201f1","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-8201f1@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5337a-8f39-4231-b13f-ebc4ba5203d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:37988","PortSpecifier":{"PortValue":37988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"552005b0-ce4a-4387-bfb9-d496e61078af","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:37988","PortSpecifier":{"PortValue":37988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482025,"nanos":802708817},"http":{"id":"552005b0-ce4a-4387-bfb9-d496e61078af","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-150ceoSwHXzvpwCaL_Y3cI9C9OEMK0Cik9uQ6lqIHHDXDdbYptkV52oKA4zIE\"}"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","subscription":"e2e-rate-iso-a-8201f1","tenant":"e2e-shared-a-8d2863","userId":"7a69b295-18c9-4168-b309-24b61d9b47eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-8201f1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8201f1"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a69b295-18c9-4168-b309-24b61d9b47eb","keyName":"e2e-rate-a-8201f1","selected_subscription":"e2e-rate-iso-a-8201f1","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-8201f1@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8201f1","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"552005b0-ce4a-4387-bfb9-d496e61078af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50740","PortSpecifier":{"PortValue":50740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c826e027-82ac-407e-af2f-d026c1db3e64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50740","PortSpecifier":{"PortValue":50740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482039,"nanos":58898304},"http":{"id":"c826e027-82ac-407e-af2f-d026c1db3e64","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"]}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c826e027-82ac-407e-af2f-d026c1db3e64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49996","PortSpecifier":{"PortValue":49996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:49996","PortSpecifier":{"PortValue":49996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482039,"nanos":110277207},"http":{"id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","method":"POST","headers":{":authority":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"]}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/52edea76c58f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3dc1ca5-235b-4002-836c-dc144e91c6ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ebe1352d-6588-4b99-8a9a-1f69df1a33ea","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0fa4bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aed7fd1-c04f-444e-87e4-b8cd79106b84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50748","PortSpecifier":{"PortValue":50748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50748","PortSpecifier":{"PortValue":50748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482039,"nanos":151930607},"http":{"id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp\"}"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","subscription":"e2e-rate-iso-a-e25a42","tenant":"e2e-shared-a-8d2863","userId":"a9359bde-353f-424c-ba09-2221fd90de2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-e25a42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e25a42"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","selected_subscription":"e2e-rate-iso-a-e25a42","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-e25a42@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e3e76a-c55b-43ca-91c4-ccd4c4080710","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6822eeee-7f11-44db-8545-b37b15715d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6822eeee-7f11-44db-8545-b37b15715d64","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6822eeee-7f11-44db-8545-b37b15715d64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50764","PortSpecifier":{"PortValue":50764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482040,"nanos":196561632},"http":{"id":"6822eeee-7f11-44db-8545-b37b15715d64","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp\"}"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","subscription":"e2e-rate-iso-a-e25a42","tenant":"e2e-shared-a-8d2863","userId":"a9359bde-353f-424c-ba09-2221fd90de2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-e25a42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6822eeee-7f11-44db-8545-b37b15715d64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e25a42"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6822eeee-7f11-44db-8545-b37b15715d64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","selected_subscription":"e2e-rate-iso-a-e25a42","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-e25a42@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6822eeee-7f11-44db-8545-b37b15715d64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6822eeee-7f11-44db-8545-b37b15715d64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50766","PortSpecifier":{"PortValue":50766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","method":"POST","path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions","host":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50766","PortSpecifier":{"PortValue":50766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482041,"nanos":238277129},"http":{"id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","method":"POST","headers":{":authority":"e2e-shared-a-8d2863.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CbyUIxkuCKY4L4Va_2n2Viic3cWSThL7gZrh1WnQZMwSxJbDQLLm5zFpcQTp\"}"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","subscription":"e2e-rate-iso-a-e25a42","tenant":"e2e-shared-a-8d2863","userId":"a9359bde-353f-424c-ba09-2221fd90de2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\",\"requestedSubscription\":\"e2e-rate-iso-a-e25a42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8d2863.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8d2863/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e25a42"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9359bde-353f-424c-ba09-2221fd90de2d","keyName":"e2e-rate-a-e25a42","selected_subscription":"e2e-rate-iso-a-e25a42","selected_subscription_key":"ai-tenant-e2e-shared-a-8d2863/e2e-rate-iso-a-e25a42@ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d2863","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e25a42","namespace":"ai-tenant-e2e-shared-a-8d2863","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-8d2863/rate-test-model-8d2863"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8207aa5-d204-4cf6-9e16-3e5a4711fc33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50008","PortSpecifier":{"PortValue":50008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","method":"POST","path":"/ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd/v1/completions","host":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.12:50008","PortSpecifier":{"PortValue":50008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784482041,"nanos":279797818},"http":{"id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","method":"POST","headers":{":authority":"e2e-shared-b-0fa4bd.apps.c6d94f31-766d-4d1b-a295-52edea76c58f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XAN9zOdDpW28HRHw_GuVjIvE7sVIVSWPfqkmB9J1lDLOTJnkEJA4DVeehx5x"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0fa4bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XAN9zOdDpW28HRHw_GuVjIvE7sVIVSWPfqkmB9J1lDLOTJnkEJA4DVeehx5x\"}"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0fa4bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7cf7f32-0d92-4631-a641-51f405689bca","keyName":"e2e-rate-b-e25a42","subscription":"e2e-rate-iso-b-e25a42","tenant":"e2e-shared-b-0fa4bd","userId":"b7cf7f32-0d92-4631-a641-51f405689bca","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0fa4bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd\",\"requestedSubscription\":\"e2e-rate-iso-b-e25a42\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0fa4bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0fa4bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e25a42","namespace":"ai-tenant-e2e-shared-b-0fa4bd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd"}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0fa4bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e25a42"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7cf7f32-0d92-4631-a641-51f405689bca","keyName":"e2e-rate-b-e25a42","selected_subscription":"e2e-rate-iso-b-e25a42","selected_subscription_key":"ai-tenant-e2e-shared-b-0fa4bd/e2e-rate-iso-b-e25a42@ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0fa4bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e25a42","namespace":"ai-tenant-e2e-shared-b-0fa4bd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0fa4bd/rate-test-model-0fa4bd"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-19T17:27:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2c289a3-60fd-4aa4-ae98-7a7ba2bf16e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-19T17:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b5f5f758c31aeddd3e3e4b7c1695ffbf08a2f6d8a7a256b207feb0555d1077"}
{"level":"info","ts":"2026-07-19T17:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0edd63957d6f9c01843e9a6a954ad739a599cbc55d68ab7d7198a9ddc0c65b0b"}
{"level":"info","ts":"2026-07-19T17:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e37c2be218b7c243f54f047abc4e4a2d8064240d2a4cb97b9ce2a5f8c765e117"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2a95023755977cc22d8c2753cc5366be11a1d72dca494429e5f3a66a14df8a7"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54dd8a139cefb913b424d8fa9dedf7872548efbdd21bae92b263326f54e076d0"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db69e82f7bcf8e156f52c0ada4d59984fe62cc0bd25de805f62402a3e23fb66a"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69822e38950126f3b39e215b0ce2cf08bfa4000fc6557b0e970fbd466093e7ea"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e588020394eb75fbbcba8f78a4edeae05b283d4a27a772eb1b41570dc0041a1"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0deb8f0fd70a7962657740ac98e90bc261041e9fc216ca0db4d0b65a89246966"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9ad918b45679bdfb97e615ec173f4ced243802dc1e28a0204850e0a3948fa70"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c93ffb527bd3f60d55db173b11970cac8de28939aadde59a59b03daa2ba79c"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a5e847eda912fed36d1fd9b30b284d316480e0b17b8c65ec4e266f248b79ac3"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3449e6c809fbdf9ec298a026afd80e5085224c50bbd9cd4a002003e3fe94ec2d"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a07f1f516f929cce41c9807fe3d14b9037973c7a63bf767f0b99df590c72dd64"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c394219ee9528b1b68223dd9b8d04246f5ab2a88c5a618e7c12ab9b495c7da6b"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5182ee6c7bb4d8059e0d8c72934f2364be15a54ef3544be5082aea3611deeee"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d4a9d3ca447021eda462a0576de825837f0936db18e7839b297c242ab94a7c"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76fc13ebd34cbb97e32dfb0d692fe593dabee0953a67b95491a799fb6e7cd91a"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd24d7a244e747fe0a1a8675a37aab9729f7d0ada7a17c4d91a034817a91224"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23af9c4d85c3df25f56855de955c85d829cfe5cfcb916b756f7a0f0c20a888ed"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b93ac12e0a0d81028964f259a8f44428d66f537186dc30cd9497a9c925fe8c3"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/248802e49a8c593cbefcb13f27057b4bd88418ad1eb5559d5fdf9f9480e72332"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1402e42ca9940322024543ec952b345d873b1046ed32c4db87e16dbb0eaa53a3"}
{"level":"info","ts":"2026-07-19T17:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b668ec19abd26432c60cc122d03651589539fb2e8169d6775e4a987fa45bd405"}