{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"}
{"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57534","PortSpecifier":{"PortValue":57534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37b287df-fee7-4a8b-a39d-cf80a8770607","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57534","PortSpecifier":{"PortValue":57534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":887083371},"http":{"id":"37b287df-fee7-4a8b-a39d-cf80a8770607","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89564a18-7c11-4901-9081-7f229419652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89564a18-7c11-4901-9081-7f229419652c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89564a18-7c11-4901-9081-7f229419652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":929598530},"http":{"id":"89564a18-7c11-4901-9081-7f229419652c","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89564a18-7c11-4901-9081-7f229419652c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89564a18-7c11-4901-9081-7f229419652c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89564a18-7c11-4901-9081-7f229419652c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89564a18-7c11-4901-9081-7f229419652c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57550","PortSpecifier":{"PortValue":57550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57550","PortSpecifier":{"PortValue":57550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":977724103},"http":{"id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48508","PortSpecifier":{"PortValue":48508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bddd351-14ff-48e2-ab48-259030fa20af","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48508","PortSpecifier":{"PortValue":48508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025619,"nanos":44858499},"http":{"id":"1bddd351-14ff-48e2-ab48-259030fa20af","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48524","PortSpecifier":{"PortValue":48524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48524","PortSpecifier":{"PortValue":48524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025620,"nanos":83457748},"http":{"id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025632,"nanos":954549793},"http":{"id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35594","PortSpecifier":{"PortValue":35594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35594","PortSpecifier":{"PortValue":35594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025633,"nanos":2312167},"http":{"id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47110","PortSpecifier":{"PortValue":47110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87439731-03f7-4da3-a1a3-a89393f3c89a","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47110","PortSpecifier":{"PortValue":47110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025633,"nanos":41906253},"http":{"id":"87439731-03f7-4da3-a1a3-a89393f3c89a","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47126","PortSpecifier":{"PortValue":47126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8aee616-8323-40d4-b32f-1a8825454493","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47126","PortSpecifier":{"PortValue":47126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025634,"nanos":80743943},"http":{"id":"a8aee616-8323-40d4-b32f-1a8825454493","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8aee616-8323-40d4-b32f-1a8825454493","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8aee616-8323-40d4-b32f-1a8825454493","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8aee616-8323-40d4-b32f-1a8825454493","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025635,"nanos":118494162},"http":{"id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"328f0133-81bc-41cf-aa38-fe0b438293fd","method":"POST","path":"/ai-tenant-e2e-shared-b-684339/rate-test-model-684339/v1/completions","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025635,"nanos":158580606},"http":{"id":"328f0133-81bc-41cf-aa38-fe0b438293fd","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-684339/rate-test-model-684339/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xi9uSMOOcZnD1Fe_rtsJcInuAEzRHQPS7slBQXtTMrLr6RBFE4DnhNmZV48"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xi9uSMOOcZnD1Fe_rtsJcInuAEzRHQPS7slBQXtTMrLr6RBFE4DnhNmZV48\"}"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","keyName":"e2e-rate-b-ca2b6c","subscription":"e2e-rate-iso-b-ca2b6c","tenant":"e2e-shared-b-684339","userId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\",\"requestedSubscription\":\"e2e-rate-iso-b-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-684339","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca2b6c","namespace":"ai-tenant-e2e-shared-b-684339","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ca2b6c"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","keyName":"e2e-rate-b-ca2b6c","selected_subscription":"e2e-rate-iso-b-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-b-684339/e2e-rate-iso-b-ca2b6c@ai-tenant-e2e-shared-b-684339/rate-test-model-684339","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-684339","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca2b6c","namespace":"ai-tenant-e2e-shared-b-684339","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"}
{"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"}
{"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"}
{"level":"info","ts":"2026-07-14T10:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"}
{"level":"info","ts":"2026-07-14T10:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}