--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T12:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ac9704-dcd5-4b64-9458-01183c72e157","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:45:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ac9704-dcd5-4b64-9458-01183c72e157","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ac9704-dcd5-4b64-9458-01183c72e157","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ac9704-dcd5-4b64-9458-01183c72e157","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38280","PortSpecifier":{"PortValue":38280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38280","PortSpecifier":{"PortValue":38280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205926,"nanos":967526398},"http":{"id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf62a030-e81f-4f59-82a7-9d7d1af865ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45504","PortSpecifier":{"PortValue":45504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c809104e-e442-4c30-91e6-d474ee7df7ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45504","PortSpecifier":{"PortValue":45504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205927,"nanos":6692936},"http":{"id":"c809104e-e442-4c30-91e6-d474ee7df7ff","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c809104e-e442-4c30-91e6-d474ee7df7ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38288","PortSpecifier":{"PortValue":38288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31f94b76-88fc-419c-a900-0a12e93f2675","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38288","PortSpecifier":{"PortValue":38288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205927,"nanos":47275962},"http":{"id":"31f94b76-88fc-419c-a900-0a12e93f2675","method":"GET","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cR0IvVnD2j90rYGa_ZTP8C6QqG0UjazAL2PuieocwPABmE0ucMdRPcMrmUdW"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cR0IvVnD2j90rYGa_ZTP8C6QqG0UjazAL2PuieocwPABmE0ucMdRPcMrmUdW\"}"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b95b2bc5-3827-4056-b08b-24789e5dfa46","keyName":"e2e-auth-iso-a-bfacd5","subscription":"e2e-auth-iso-0131e6","tenant":"e2e-shared-a-cf65e4","userId":"b95b2bc5-3827-4056-b08b-24789e5dfa46","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0131e6"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f94b76-88fc-419c-a900-0a12e93f2675","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205946,"nanos":685365884},"http":{"id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55bc033b-3a6e-41e1-bc31-ea49d96ffc78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39064","PortSpecifier":{"PortValue":39064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39064","PortSpecifier":{"PortValue":39064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205946,"nanos":728554029},"http":{"id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a64a4039-cb97-4ba2-8930-83b44d4c0ebb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39072","PortSpecifier":{"PortValue":39072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39072","PortSpecifier":{"PortValue":39072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205946,"nanos":768692061},"http":{"id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","method":"GET","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5VuEwDVUqcEtb75_dFSEkxVLoUMZIopr1wWVI2foOvyYxQwm40n2pxof49j"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5VuEwDVUqcEtb75_dFSEkxVLoUMZIopr1wWVI2foOvyYxQwm40n2pxof49j\"}"}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T12:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0d8ca01-03eb-4472-bbed-f7001d3968c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205966,"nanos":490408974},"http":{"id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ccf0a17-fc10-410e-8f11-c2bc100680bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33084","PortSpecifier":{"PortValue":33084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33084","PortSpecifier":{"PortValue":33084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205966,"nanos":529014186},"http":{"id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0074508-3d3d-4561-a2ac-886c352b8d2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c85381-716a-406b-810a-a8659b36137b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77c85381-716a-406b-810a-a8659b36137b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77c85381-716a-406b-810a-a8659b36137b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38970","PortSpecifier":{"PortValue":38970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205966,"nanos":566780535},"http":{"id":"77c85381-716a-406b-810a-a8659b36137b","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77c85381-716a-406b-810a-a8659b36137b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77c85381-716a-406b-810a-a8659b36137b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77c85381-716a-406b-810a-a8659b36137b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c85381-716a-406b-810a-a8659b36137b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77c85381-716a-406b-810a-a8659b36137b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33086","PortSpecifier":{"PortValue":33086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"409acd3d-407a-4d30-a88b-e3921c425f09","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33086","PortSpecifier":{"PortValue":33086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205966,"nanos":604226656},"http":{"id":"409acd3d-407a-4d30-a88b-e3921c425f09","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"409acd3d-407a-4d30-a88b-e3921c425f09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205986,"nanos":276323018},"http":{"id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43d31f76-f55a-4203-9262-d66eb3c0d8f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37590","PortSpecifier":{"PortValue":37590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37590","PortSpecifier":{"PortValue":37590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205986,"nanos":315724010},"http":{"id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf7f3c7-f247-48bb-8758-5cf06a900825","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37604","PortSpecifier":{"PortValue":37604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","method":"GET","path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37604","PortSpecifier":{"PortValue":37604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205986,"nanos":352012939},"http":{"id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","method":"GET","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b18aec9-3bc8-44b3-8a81-51afa7d9456b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35042","PortSpecifier":{"PortValue":35042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","method":"GET","path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35042","PortSpecifier":{"PortValue":35042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784205986,"nanos":384648944},"http":{"id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","method":"GET","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/704c7a6e-8795-4a4a-9d2f-2790c1f7cb72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dff8ced-5515-4b81-b014-37dd7c6d1a73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42672","PortSpecifier":{"PortValue":42672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3dfea98-c30c-452a-8f26-f6641869949b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42672","PortSpecifier":{"PortValue":42672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206009,"nanos":92273848},"http":{"id":"f3dfea98-c30c-452a-8f26-f6641869949b","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3dfea98-c30c-452a-8f26-f6641869949b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77aceef7-1816-478c-a855-6f2c38796381","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43246","PortSpecifier":{"PortValue":43246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77aceef7-1816-478c-a855-6f2c38796381","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77aceef7-1816-478c-a855-6f2c38796381","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43246","PortSpecifier":{"PortValue":43246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206009,"nanos":131541790},"http":{"id":"77aceef7-1816-478c-a855-6f2c38796381","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77aceef7-1816-478c-a855-6f2c38796381","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77aceef7-1816-478c-a855-6f2c38796381","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/auth-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77aceef7-1816-478c-a855-6f2c38796381","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77aceef7-1816-478c-a855-6f2c38796381","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77aceef7-1816-478c-a855-6f2c38796381","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42680","PortSpecifier":{"PortValue":42680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42680","PortSpecifier":{"PortValue":42680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206009,"nanos":169510893},"http":{"id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AOSk6OSKiJCaAU9U_hhiQOUfsp8REkQyf6zgD7w1MlBZfGR9iQ6kqnZRJhDj"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AOSk6OSKiJCaAU9U_hhiQOUfsp8REkQyf6zgD7w1MlBZfGR9iQ6kqnZRJhDj\"}"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d194207c-f4bb-4a4e-877d-8cadf2573ce1","keyName":"e2e-auth-iso-a-39b869","subscription":"e2e-auth-iso-d840cb","tenant":"e2e-shared-a-cf65e4","userId":"d194207c-f4bb-4a4e-877d-8cadf2573ce1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/auth-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d840cb"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:46:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e855c54-ed15-476e-aa6e-930ce3cf43d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160629ceb13f05ece1adaeb3632a206c7288c315e106d2b91f3b848f32fdf0e8"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d71cf2049e8f4665875dbe6ed572b9cb84e26b2123c2ccd94f496d96491295"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c97861a5cf582a99364577980e4b9e345c9a4be4db9d2408815c200178ff75"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8e192b7eac189500ad9f077dd00a173ba658c5539feaa387b6364f5bb0b5502"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/614f09ff4d6403323af3e8f0b2261cf493b38b92d834e0da396564799bc41d73"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd5fc7b4165d35dd48c00501f14aeafdca80c04d12ac1a27c5816a233ae25055"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0073475b6e4421345d8e71638447c8df7add18a5cb9b575b365e991538ced31d"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/888bd3be8d2a526eb78c0b5350429d7dfad7c37f3a812350143bfec4ec81a564"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a33f4e03878b102bca1a06b1b59e009f41294ff287e77b02b70d16bc9b08c21e"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32395d7657d600e6cee3373c375564bca5e27d2bdf5c6094f6bd6d9513bbb705"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd991c92dfde54efdfec334ebaffdcdde8e988e4d7c949ae47711a7d496c7367"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c6265492f2f818dd123b2278df016ec983a2a9fd82a5ab1f3ca86b395d8f917"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c45a6c01955b3d1f9ad26b5101cc8a54b5be0d4e27438fdaf5f2007c9bcfe77"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd80024aaab4df5093947b151f667e6ef87ae994f9306f0e997ccffb21e9aca4"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88671a433b36f9c9984dccf4ce75e02af85ecee1acbdf46652b1d20521c2b8f5"}
{"level":"info","ts":"2026-07-16T12:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0920a4f4183a4c3ac534091f8b9ec02ed23ffa105e6d3e828a367557cd50a90a"}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"error","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"error","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"error","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915574f2841bb917969288337fffc33b8a863442d74775ad9158917d217f4ad3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915574f2841bb917969288337fffc33b8a863442d74775ad9158917d217f4ad3"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"info","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"error","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6228ba29aa9b6a37d040e651a7775fd984f96fcf3dbd4414f468eb4785c49e3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6228ba29aa9b6a37d040e651a7775fd984f96fcf3dbd4414f468eb4785c49e3e"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:47:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fcf87ed71a7efdcf6c0979c69c1fe9d9d644200c306a3be69a6d2799103ea5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fcf87ed71a7efdcf6c0979c69c1fe9d9d644200c306a3be69a6d2799103ea5e"}
{"level":"debug","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"}
{"level":"info","ts":"2026-07-16T12:47:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58220","PortSpecifier":{"PortValue":58220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c19c6824-ee96-416c-b304-9ddf389440f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58220","PortSpecifier":{"PortValue":58220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206074,"nanos":547657178},"http":{"id":"c19c6824-ee96-416c-b304-9ddf389440f3","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/sub-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c19c6824-ee96-416c-b304-9ddf389440f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f39c724f-20e0-4802-92a1-871f2f4ab531","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206074,"nanos":588010764},"http":{"id":"f39c724f-20e0-4802-92a1-871f2f4ab531","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/sub-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f39c724f-20e0-4802-92a1-871f2f4ab531","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58232","PortSpecifier":{"PortValue":58232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58232","PortSpecifier":{"PortValue":58232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206074,"nanos":627468592},"http":{"id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","method":"GET","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q2as4TmkQmTvc2x1_WCSo8HiuXOhdPY2IX5LZNrk0qA0NF6BllqTFo954yuP"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q2as4TmkQmTvc2x1_WCSo8HiuXOhdPY2IX5LZNrk0qA0NF6BllqTFo954yuP\"}"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af85a9b5-12fe-44d8-8186-070907f46286","keyName":"e2e-sub-iso-956229","subscription":"e2e-a-only-ed4e27","tenant":"e2e-shared-a-cf65e4","userId":"af85a9b5-12fe-44d8-8186-070907f46286","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/sub-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ed4e27"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5e8148-7825-435e-a8e7-cfee2473e2f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45942","PortSpecifier":{"PortValue":45942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45942","PortSpecifier":{"PortValue":45942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206074,"nanos":678782454},"http":{"id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","method":"GET","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S2642sl2LLgSNGl6_NDnsjPFCVMfjaUJ0sIzlrfbTGlVjdJ1NPRR08WYmvai"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1S2642sl2LLgSNGl6_NDnsjPFCVMfjaUJ0sIzlrfbTGlVjdJ1NPRR08WYmvai\"}"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b65c73f-b407-4dce-b574-5fc26bf11b8e","keyName":"e2e-sub-iso-4f9bd4","subscription":"e2e-b-only-ed4e27","tenant":"e2e-shared-b-3c72a3","userId":"6b65c73f-b407-4dce-b574-5fc26bf11b8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/sub-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ed4e27"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:47:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5453c21-f6f7-4ccd-a8da-fe8d34c5c48c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43932","PortSpecifier":{"PortValue":43932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43932","PortSpecifier":{"PortValue":43932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206085,"nanos":5232740},"http":{"id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/sub-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97266a2-7f9f-4a49-89f3-9e98fa2101bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80251c8b-e035-4417-9b90-99bc5295231d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53154","PortSpecifier":{"PortValue":53154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80251c8b-e035-4417-9b90-99bc5295231d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80251c8b-e035-4417-9b90-99bc5295231d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53154","PortSpecifier":{"PortValue":53154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206085,"nanos":41948211},"http":{"id":"80251c8b-e035-4417-9b90-99bc5295231d","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80251c8b-e035-4417-9b90-99bc5295231d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80251c8b-e035-4417-9b90-99bc5295231d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/sub-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80251c8b-e035-4417-9b90-99bc5295231d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80251c8b-e035-4417-9b90-99bc5295231d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80251c8b-e035-4417-9b90-99bc5295231d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43944","PortSpecifier":{"PortValue":43944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e8c37cf-4add-47b7-b41b-cca659004e55","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43944","PortSpecifier":{"PortValue":43944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206085,"nanos":75856375},"http":{"id":"2e8c37cf-4add-47b7-b41b-cca659004e55","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4budSNu9Go4NTkCf_XnunqE6ILtwlHcqGOykEaa7LA0fGlMj3KZS6nVWuSK7"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4budSNu9Go4NTkCf_XnunqE6ILtwlHcqGOykEaa7LA0fGlMj3KZS6nVWuSK7\"}"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a3d8b578-dc04-439f-a97b-898cb3e23bbe","keyName":"e2e-sub-iso-5a7e6b","subscription":"e2e-shared-sub-b7dd92","tenant":"e2e-shared-a-cf65e4","userId":"a3d8b578-dc04-439f-a97b-898cb3e23bbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/sub-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b7dd92"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e8c37cf-4add-47b7-b41b-cca659004e55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53156","PortSpecifier":{"PortValue":53156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7293a7d3-a9bb-4d27-af85-7999b8076466","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53156","PortSpecifier":{"PortValue":53156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206085,"nanos":108027397},"http":{"id":"7293a7d3-a9bb-4d27-af85-7999b8076466","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Wf3d2nDFksOzBZu3_UwzqC9ni5GKdPOFtLSkyaLT4tVgydrqLfaCUH6zAEUg"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Wf3d2nDFksOzBZu3_UwzqC9ni5GKdPOFtLSkyaLT4tVgydrqLfaCUH6zAEUg\"}"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e96d7673-d523-40c3-925e-751b98aa4f3b","keyName":"e2e-sub-iso-c41cf9","subscription":"e2e-shared-sub-b7dd92","tenant":"e2e-shared-b-3c72a3","userId":"e96d7673-d523-40c3-925e-751b98aa4f3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/sub-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b7dd92"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7293a7d3-a9bb-4d27-af85-7999b8076466","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d37efbcf72b7fa9ad69fcc1631d1abb0bd2b1a1bd6d13a94000531a651497b6b"}
{"level":"info","ts":"2026-07-16T12:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c39ec33ff40c85f531f6b400e914e4acaf973122387ce7f22440d68bc24cab4"}
{"level":"info","ts":"2026-07-16T12:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4e2130cb8198bf13fdfd2281285efc3a29ca8b8ad9862236a7b1acc888c89bd"}
{"level":"info","ts":"2026-07-16T12:48:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5342fd8ec433ea6fbdde6b5302759a092070f4e657bf09f650793ec4ebdbd96f"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96ee8ce2ec0529958f491a4eb3bdfcba92054cddaa812bab9a77d94c69fc2cd"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c80d6754d905e28cc1106f56a9bdc6f3158ed19dcd39b54c03cec3e7e3fda92"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2384766028f77f8e34082194306e675b76c8a537d729c0887082a619d84bbff4"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08fba015c3db1bd503f445e6591646b5e339ce062f84d758e6d0a5575ea35dca"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4c45d7bade11dde3360117d30a47c71946f98c18ef20e025cc8ee352b88de18"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16b6d8b00bdeb9b258cc0abfc7d6d3f92034ad716d2eeca989a787d27ddfa811"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf7da3310d896b688d8c4c7d23271df6f41f1171574172fdc11cdc53d428c36d"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/708c20d805499ebe99ee4247afec3dc07e004b214d80919b59db0f89c6877ba2"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bdb601a6c2f35e6e4d3cb39bfe2e7c290fd74c683ce203880ab389501bdc2ed"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9efc8e4e47a19490bacac5a95cf2c5b7060aa558e0a036243235dd09d2ece4d0"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92873c76a0b14e795884210702cbf1359aa94030e00bd7b5355538890ee982ab"}
{"level":"info","ts":"2026-07-16T12:48:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afcf88710cb96797bebf4389f7c6a2495b750e31f83ce136e1737551d096947a"}
{"level":"debug","ts":"2026-07-16T12:48:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"error","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"}
{"level":"info","ts":"2026-07-16T12:48:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"error","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a634a89b78d294b9fc49d017e32bcefe6e2852203693c067a5d46766f97b14f9"}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6228ba29aa9b6a37d040e651a7775fd984f96fcf3dbd4414f468eb4785c49e3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6228ba29aa9b6a37d040e651a7775fd984f96fcf3dbd4414f468eb4785c49e3e"}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4383e39fe7dadf6a026f479b3b243d33b87183871c28faa180378e18c3a176"}
{"level":"debug","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915574f2841bb917969288337fffc33b8a863442d74775ad9158917d217f4ad3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fcf87ed71a7efdcf6c0979c69c1fe9d9d644200c306a3be69a6d2799103ea5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915574f2841bb917969288337fffc33b8a863442d74775ad9158917d217f4ad3"}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fcf87ed71a7efdcf6c0979c69c1fe9d9d644200c306a3be69a6d2799103ea5e"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:48:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}
{"level":"debug","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"}
{"level":"info","ts":"2026-07-16T12:48:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59724","PortSpecifier":{"PortValue":59724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59724","PortSpecifier":{"PortValue":59724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206139,"nanos":44448539},"http":{"id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9a7b5b1-3b5b-43db-b671-c66b4f5417ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49682","PortSpecifier":{"PortValue":49682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49682","PortSpecifier":{"PortValue":49682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206139,"nanos":84897155},"http":{"id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a1acb7-f2fe-462b-88b2-5c13a5f99e6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59734","PortSpecifier":{"PortValue":59734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ae3e45d-9b22-4455-a318-cb0afb319618","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59734","PortSpecifier":{"PortValue":59734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206139,"nanos":121979345},"http":{"id":"8ae3e45d-9b22-4455-a318-cb0afb319618","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae3e45d-9b22-4455-a318-cb0afb319618","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59744","PortSpecifier":{"PortValue":59744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59744","PortSpecifier":{"PortValue":59744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206140,"nanos":200595093},"http":{"id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56d8904-3a0f-4096-85f2-47971ddd13d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59760","PortSpecifier":{"PortValue":59760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"411ef15d-46c7-4708-9ddb-bf11a112e972","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59760","PortSpecifier":{"PortValue":59760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206141,"nanos":247338334},"http":{"id":"411ef15d-46c7-4708-9ddb-bf11a112e972","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411ef15d-46c7-4708-9ddb-bf11a112e972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59772","PortSpecifier":{"PortValue":59772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59772","PortSpecifier":{"PortValue":59772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206142,"nanos":289159972},"http":{"id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ebb0347-2f30-4eb7-a749-b7c684c71275","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59786","PortSpecifier":{"PortValue":59786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1e79821-588e-4016-ac50-d62d8f81fd28","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59786","PortSpecifier":{"PortValue":59786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206143,"nanos":333985622},"http":{"id":"e1e79821-588e-4016-ac50-d62d8f81fd28","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e79821-588e-4016-ac50-d62d8f81fd28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59788","PortSpecifier":{"PortValue":59788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59788","PortSpecifier":{"PortValue":59788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206144,"nanos":370327717},"http":{"id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a906721-ad02-41ec-ba83-9cf3f2234d6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59802","PortSpecifier":{"PortValue":59802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59802","PortSpecifier":{"PortValue":59802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206145,"nanos":410034163},"http":{"id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2492a7d2-4523-4e38-8e6a-6f8660b02eb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59804","PortSpecifier":{"PortValue":59804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59804","PortSpecifier":{"PortValue":59804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206146,"nanos":450733964},"http":{"id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dd074fa-e13d-4327-b5c0-583da3ba6f76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3973660-1199-464d-975c-6708818dcde2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59818","PortSpecifier":{"PortValue":59818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3973660-1199-464d-975c-6708818dcde2","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3973660-1199-464d-975c-6708818dcde2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59818","PortSpecifier":{"PortValue":59818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206147,"nanos":490084811},"http":{"id":"f3973660-1199-464d-975c-6708818dcde2","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3973660-1199-464d-975c-6708818dcde2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3973660-1199-464d-975c-6708818dcde2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3973660-1199-464d-975c-6708818dcde2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3973660-1199-464d-975c-6708818dcde2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3973660-1199-464d-975c-6708818dcde2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3973660-1199-464d-975c-6708818dcde2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"871cc722-4146-401b-a0cd-e72cf2709667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"871cc722-4146-401b-a0cd-e72cf2709667","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"871cc722-4146-401b-a0cd-e72cf2709667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206148,"nanos":529663012},"http":{"id":"871cc722-4146-401b-a0cd-e72cf2709667","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"871cc722-4146-401b-a0cd-e72cf2709667","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871cc722-4146-401b-a0cd-e72cf2709667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"871cc722-4146-401b-a0cd-e72cf2709667","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"871cc722-4146-401b-a0cd-e72cf2709667","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55068","PortSpecifier":{"PortValue":55068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"addc415c-52d9-4ca8-a80d-70851d6645f7","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55068","PortSpecifier":{"PortValue":55068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206149,"nanos":565090865},"http":{"id":"addc415c-52d9-4ca8-a80d-70851d6645f7","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"addc415c-52d9-4ca8-a80d-70851d6645f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f371398-5253-4ff4-970d-8490fad915a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55078","PortSpecifier":{"PortValue":55078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f371398-5253-4ff4-970d-8490fad915a8","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f371398-5253-4ff4-970d-8490fad915a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55078","PortSpecifier":{"PortValue":55078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206150,"nanos":601666240},"http":{"id":"5f371398-5253-4ff4-970d-8490fad915a8","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f371398-5253-4ff4-970d-8490fad915a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f371398-5253-4ff4-970d-8490fad915a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f371398-5253-4ff4-970d-8490fad915a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f371398-5253-4ff4-970d-8490fad915a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55080","PortSpecifier":{"PortValue":55080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55080","PortSpecifier":{"PortValue":55080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206151,"nanos":637645483},"http":{"id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r5zfXGsHBUsJmG92_76zbEy65sFAcfZpjJweFkfwXPlGmdq1qgUd2f0lN6G\"}"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","subscription":"e2e-rate-iso-a-f78e83","tenant":"e2e-shared-a-cf65e4","userId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-f78e83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f78e83"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"902a9ce7-6b05-406d-bb7e-5559137cbe7c","keyName":"e2e-rate-a-f78e83","selected_subscription":"e2e-rate-iso-a-f78e83","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-f78e83@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f78e83","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24ca0ad9-0ec1-4cbb-9dd5-0348a571fdca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42156","PortSpecifier":{"PortValue":42156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42156","PortSpecifier":{"PortValue":42156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206162,"nanos":662167309},"http":{"id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ccac4a4-1960-4ab0-85f6-571eda2d99ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36800","PortSpecifier":{"PortValue":36800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58eb2092-d0ff-4410-a929-098821f3c23c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36800","PortSpecifier":{"PortValue":36800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206162,"nanos":702502676},"http":{"id":"58eb2092-d0ff-4410-a929-098821f3c23c","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"]}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a0acea4d0b67"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3d7477-229b-4fa1-bc04-190f579b6e7c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"08635ea3-e0e3-4642-89a5-3da8b62838b4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eeda2e141870831cd50afa2f290bee9f781b7011cf782d58ef96abcdf9109604"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58eb2092-d0ff-4410-a929-098821f3c23c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42164","PortSpecifier":{"PortValue":42164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42164","PortSpecifier":{"PortValue":42164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206162,"nanos":737668012},"http":{"id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6f3205-5672-4677-a79e-bd1a7f6aae7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a931814-5293-4760-b928-fb199f12c819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42166","PortSpecifier":{"PortValue":42166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a931814-5293-4760-b928-fb199f12c819","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a931814-5293-4760-b928-fb199f12c819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42166","PortSpecifier":{"PortValue":42166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206163,"nanos":775881876},"http":{"id":"6a931814-5293-4760-b928-fb199f12c819","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a931814-5293-4760-b928-fb199f12c819","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a931814-5293-4760-b928-fb199f12c819","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a931814-5293-4760-b928-fb199f12c819","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a931814-5293-4760-b928-fb199f12c819","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a931814-5293-4760-b928-fb199f12c819","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a931814-5293-4760-b928-fb199f12c819","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42174","PortSpecifier":{"PortValue":42174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42174","PortSpecifier":{"PortValue":42174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206164,"nanos":811428002},"http":{"id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd9ecd78-7ab3-4f23-b84d-3e60f55e9b78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42178","PortSpecifier":{"PortValue":42178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e303e84-c1ad-474e-8238-b80b2df42b83","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42178","PortSpecifier":{"PortValue":42178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206165,"nanos":846067405},"http":{"id":"4e303e84-c1ad-474e-8238-b80b2df42b83","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e303e84-c1ad-474e-8238-b80b2df42b83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42192","PortSpecifier":{"PortValue":42192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42192","PortSpecifier":{"PortValue":42192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206166,"nanos":883508185},"http":{"id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a48d83f2-c22a-473c-86bf-ed61b09fec7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42196","PortSpecifier":{"PortValue":42196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed9812b-9113-4990-b525-9a043e47bb73","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42196","PortSpecifier":{"PortValue":42196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206167,"nanos":918986036},"http":{"id":"3ed9812b-9113-4990-b525-9a043e47bb73","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed9812b-9113-4990-b525-9a043e47bb73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46342","PortSpecifier":{"PortValue":46342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46342","PortSpecifier":{"PortValue":46342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206168,"nanos":958998502},"http":{"id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6e16630-bc1e-4a03-8540-f471fa299b1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1da555fc-f14d-4106-adb4-900a1269661a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1da555fc-f14d-4106-adb4-900a1269661a","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1da555fc-f14d-4106-adb4-900a1269661a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206169,"nanos":996299432},"http":{"id":"1da555fc-f14d-4106-adb4-900a1269661a","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1da555fc-f14d-4106-adb4-900a1269661a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1da555fc-f14d-4106-adb4-900a1269661a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1da555fc-f14d-4106-adb4-900a1269661a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1da555fc-f14d-4106-adb4-900a1269661a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46368","PortSpecifier":{"PortValue":46368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46368","PortSpecifier":{"PortValue":46368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206171,"nanos":33876711},"http":{"id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9cd50cc-995d-494d-ad1b-1763d602bb79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46378","PortSpecifier":{"PortValue":46378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46378","PortSpecifier":{"PortValue":46378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206172,"nanos":68394565},"http":{"id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0adae9b-39ad-443d-92fa-16dfd250fd20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46382","PortSpecifier":{"PortValue":46382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","method":"POST","path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions","host":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46382","PortSpecifier":{"PortValue":46382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206173,"nanos":102872941},"http":{"id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","method":"POST","headers":{":authority":"e2e-shared-a-cf65e4.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KZApcNJeMwFZ0X9P_2zi93RNrb0G1bfaqw5KDdqCX5O7VJKMB3uDAm0Nq8sA\"}"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","subscription":"e2e-rate-iso-a-a8af01","tenant":"e2e-shared-a-cf65e4","userId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\",\"requestedSubscription\":\"e2e-rate-iso-a-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cf65e4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cf65e4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb4a12d1-3756-4797-87d8-a6e82a27c43c","keyName":"e2e-rate-a-a8af01","selected_subscription":"e2e-rate-iso-a-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-a-cf65e4/e2e-rate-iso-a-a8af01@ai-tenant-e2e-shared-a-cf65e4/rate-test-model-cf65e4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cf65e4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8af01","namespace":"ai-tenant-e2e-shared-a-cf65e4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4c92cd-5fc8-4148-81cf-54023ec29f3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9813f1f-e761-4106-b469-27246a476b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55860","PortSpecifier":{"PortValue":55860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9813f1f-e761-4106-b469-27246a476b87","method":"POST","path":"/ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3/v1/completions","host":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9813f1f-e761-4106-b469-27246a476b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55860","PortSpecifier":{"PortValue":55860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206173,"nanos":147199578},"http":{"id":"b9813f1f-e761-4106-b469-27246a476b87","method":"POST","headers":{":authority":"e2e-shared-b-3c72a3.apps.56e63957-e366-4fa5-9a39-a0acea4d0b67.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15h0ywvOrK4NIbMU3_iYM11t6K75zAzHHLvI3dXFkx2qYZEmKuk5fR7iv0szJ"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15h0ywvOrK4NIbMU3_iYM11t6K75zAzHHLvI3dXFkx2qYZEmKuk5fR7iv0szJ\"}"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d33db670-bc4c-44e3-8002-4c6d77f9f2c4","keyName":"e2e-rate-b-a8af01","subscription":"e2e-rate-iso-b-a8af01","tenant":"e2e-shared-b-3c72a3","userId":"d33db670-bc4c-44e3-8002-4c6d77f9f2c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3\",\"requestedSubscription\":\"e2e-rate-iso-b-a8af01\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3c72a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3c72a3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8af01","namespace":"ai-tenant-e2e-shared-b-3c72a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9813f1f-e761-4106-b469-27246a476b87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3c72a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a8af01"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9813f1f-e761-4106-b469-27246a476b87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d33db670-bc4c-44e3-8002-4c6d77f9f2c4","keyName":"e2e-rate-b-a8af01","selected_subscription":"e2e-rate-iso-b-a8af01","selected_subscription_key":"ai-tenant-e2e-shared-b-3c72a3/e2e-rate-iso-b-a8af01@ai-tenant-e2e-shared-b-3c72a3/rate-test-model-3c72a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3c72a3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8af01","namespace":"ai-tenant-e2e-shared-b-3c72a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9813f1f-e761-4106-b469-27246a476b87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9813f1f-e761-4106-b469-27246a476b87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53f52ac211c8624c51dfa5bce1cd198ac858897010a06d01cdc91e9c4021bc0d"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/539ee5d381d39f5b109334ff859978b7dac83b83797b5412feeda7913eabc368"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33376ded201330b067375ef58939cf59c7221be5542cd4f5cc833c69a603072a"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ec9317f0f606341ce1891699b03e177dc2d7cfea9b5699eb2793678ce671bf7"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c93892968c73bc36dbfe8b63123dee8f78db93b2eb2f459f81fa3d667c2b475"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80779c0eda5cd7a6e233973bb318aae6ef71c0b5bc5b9deefb7d01febf322912"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9594d0e39509d52e5e1c59948d2450f9d484dc99e9af0473da61480df1604f4"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8859358d9c70fa785b76b922f9c9f52c19a57d1a0245f638ee0c7133fe0c4835"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c94fb88468b9960d43084002a3472612c8de78df6a69c1c68ab3924e268f057c"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52a5b6af490156bb5395fa475699bf4747c3462252b5cf8b2a40a4c08b2aeb5"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7b1db4c1f47dd4c9ca7344bf9dc87bf7d16caed6648a287dde9311377083656"}
{"level":"info","ts":"2026-07-16T12:49:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c176e1d29eb1b98bdf75b779ac2a5558dcac4100d09c23719c15c54c408157e"}
{"level":"info","ts":"2026-07-16T12:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d03cf5abc8d8f28225f429b9dec31611f300ea9a3db88049da8697f486e394f"}
{"level":"info","ts":"2026-07-16T12:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2a728907b467a9bce69d99584fd98b4e173fb6fb4efa879297ab7b77d572ce1"}
{"level":"info","ts":"2026-07-16T12:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24d47fc1afffc9a1d034ea31929737ac4543a2bf6b21a2e5ef58aada8655782"}
{"level":"info","ts":"2026-07-16T12:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/884ca9ffd2dbe65a21e331996613c657d934e310ec870f9e66cd9a1e50002870"}
{"level":"info","ts":"2026-07-16T12:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fcf87ed71a7efdcf6c0979c69c1fe9d9d644200c306a3be69a6d2799103ea5e"}
{"level":"info","ts":"2026-07-16T12:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/915574f2841bb917969288337fffc33b8a863442d74775ad9158917d217f4ad3"}
{"level":"info","ts":"2026-07-16T12:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9cad8e0d62ad889770ce0987e3a9baf289b961453fc6d5aae7115070f279aad"}
{"level":"info","ts":"2026-07-16T12:50:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e972911172fba6c0bc721dce3f71eb71e77fb6eee2f3302c2f7e46f6e7f332"}