{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"error","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:46:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:46:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"error","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"error","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"debug","ts":"2026-07-15T08:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T08:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"error","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"debug","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"info","ts":"2026-07-15T08:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34540","PortSpecifier":{"PortValue":34540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8cf799f-f710-4870-bc51-e93e7c1af839","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34540","PortSpecifier":{"PortValue":34540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":779331806},"http":{"id":"c8cf799f-f710-4870-bc51-e93e7c1af839","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8cf799f-f710-4870-bc51-e93e7c1af839","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19945308-cb94-4293-b98d-68ce47f43ba5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59456","PortSpecifier":{"PortValue":59456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":832497500},"http":{"id":"19945308-cb94-4293-b98d-68ce47f43ba5","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19945308-cb94-4293-b98d-68ce47f43ba5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34550","PortSpecifier":{"PortValue":34550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34550","PortSpecifier":{"PortValue":34550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105255,"nanos":887263270},"http":{"id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"920c3a5b-b7db-4e9a-a745-5adc87feaf44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34552","PortSpecifier":{"PortValue":34552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86a43648-d81b-4109-82fb-20c823bfd2a4","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34552","PortSpecifier":{"PortValue":34552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105256,"nanos":954199051},"http":{"id":"86a43648-d81b-4109-82fb-20c823bfd2a4","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a43648-d81b-4109-82fb-20c823bfd2a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34554","PortSpecifier":{"PortValue":34554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34554","PortSpecifier":{"PortValue":34554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105257,"nanos":991961281},"http":{"id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dC7kXmBdJnPXRytk_3SeXnBdgn3qNB5aRsd3fSHhjmcFGAo7VaXfLo4vxLsC\"}"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","subscription":"e2e-rate-iso-a-7c2a50","tenant":"e2e-shared-a-8e59d0","userId":"af35f167-72a1-40af-bf7b-d782a3576efd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7c2a50\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c2a50"}
{"level":"debug","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af35f167-72a1-40af-bf7b-d782a3576efd","keyName":"e2e-rate-a-7c2a50","selected_subscription":"e2e-rate-iso-a-7c2a50","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-7c2a50@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c2a50","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de21bc4d-b258-4e8a-b8ed-7dc367c0afb7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46588","PortSpecifier":{"PortValue":46588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46588","PortSpecifier":{"PortValue":46588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105268,"nanos":932203561},"http":{"id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be96104a-91fa-4144-9b8b-ab1e1283aa1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4c25335-786d-424d-8dd8-fcd0cc301076","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105268,"nanos":976059416},"http":{"id":"c4c25335-786d-424d-8dd8-fcd0cc301076","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"]}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/781affd0614f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3b814c2-e57a-4629-9342-618f20e16a95"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2beb61d7-e91a-4dd9-b89c-5f5d8683e98b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c25335-786d-424d-8dd8-fcd0cc301076","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105269,"nanos":21315704},"http":{"id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"841704b7-0bfd-4394-986a-a2f45b5e88d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46618","PortSpecifier":{"PortValue":46618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90d9af7d-8275-427d-814b-46d8cefea0ec","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46618","PortSpecifier":{"PortValue":46618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105270,"nanos":61970570},"http":{"id":"90d9af7d-8275-427d-814b-46d8cefea0ec","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90d9af7d-8275-427d-814b-46d8cefea0ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46634","PortSpecifier":{"PortValue":46634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","method":"POST","path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions","host":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46634","PortSpecifier":{"PortValue":46634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105271,"nanos":101294871},"http":{"id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","method":"POST","headers":{":authority":"e2e-shared-a-8e59d0.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uVWWlQ0u7Twvyy4R_3NOlAWxrtc84bi1IIlemBPnzta2ZV8JtNizIbZZbfzp\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","subscription":"e2e-rate-iso-a-4eea5b","tenant":"e2e-shared-a-8e59d0","userId":"e881f3da-4946-4113-9f8e-6ccf219dda59","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\",\"requestedSubscription\":\"e2e-rate-iso-a-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e59d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8e59d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e881f3da-4946-4113-9f8e-6ccf219dda59","keyName":"e2e-rate-a-4eea5b","selected_subscription":"e2e-rate-iso-a-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-a-8e59d0/e2e-rate-iso-a-4eea5b@ai-tenant-e2e-shared-a-8e59d0/rate-test-model-8e59d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e59d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4eea5b","namespace":"ai-tenant-e2e-shared-a-8e59d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b018d9c4-3b03-401b-a4d4-d1b5f821cc30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45806","PortSpecifier":{"PortValue":45806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","method":"POST","path":"/ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148/v1/completions","host":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45806","PortSpecifier":{"PortValue":45806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784105271,"nanos":143166407},"http":{"id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","method":"POST","headers":{":authority":"e2e-shared-b-1db148.apps.2b354e5a-ec87-4fd7-912d-781affd0614f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19obugFpNoHiLUElv_5P5wVT8RdF4UHaNoQKuf5WVw3GvQEame1Z7qJMtPdYa"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19obugFpNoHiLUElv_5P5wVT8RdF4UHaNoQKuf5WVw3GvQEame1Z7qJMtPdYa\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","keyName":"e2e-rate-b-4eea5b","subscription":"e2e-rate-iso-b-4eea5b","tenant":"e2e-shared-b-1db148","userId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\",\"requestedSubscription\":\"e2e-rate-iso-b-4eea5b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1db148.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1db148","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4eea5b","namespace":"ai-tenant-e2e-shared-b-1db148","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1db148/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4eea5b"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0edd213e-4c3a-4c85-80dc-e6c6a5ad9266","keyName":"e2e-rate-b-4eea5b","selected_subscription":"e2e-rate-iso-b-4eea5b","selected_subscription_key":"ai-tenant-e2e-shared-b-1db148/e2e-rate-iso-b-4eea5b@ai-tenant-e2e-shared-b-1db148/rate-test-model-1db148","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1db148","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4eea5b","namespace":"ai-tenant-e2e-shared-b-1db148","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T08:47:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ac12a7-0633-4c26-9dd6-5d3383c17bce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f5ebd27c64a492ac1424c829f0c3f5fe734be9f790750572e7f0e743ed59d2e"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/096c134956ff3c74a345d803334e0dccb56d624666e6f5bd9c51d5ee5e3a9ef8"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f919397c07451c972579809cc31ea5c40ddf3a5fd0c3af940c6f02aac3b5b073"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53d902e688d2634e4b060ce821b72b3a9cd79ef1554291e702559780ec064b69"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb902f3b34edeb8f5816cd73250e0b41ea9cf711f987ec6ee2cf558e727503a"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed95a1768c9754303662fff0debae871a13c7f4c9d37dff409690914e9b8736c"}
{"level":"info","ts":"2026-07-15T08:48:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee427b9752cf5e102ecab5d88722f97c449665546f1790a5dc32106be3eb30e3"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d42f40487e20545ad6d39d28370961ebf44b9d12252598a82ae478c04fdea3f1"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be5d54a51a901d027850fb7d68efdad377e1eca7d28a14c53778d3c3d3c40a35"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13f6ca14f9f3e309bc65490aebd93f914a462b16db803c08e76f79865aca995f"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff123a6ac0261d619d84d4a8fcd3301f3f24f0ad63a13b65f5e9915ecbef4177"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9453dcd3f18597396fedba428d321a56dfadee16c0ca7aea0cabccd0685c8af5"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4d5ccf990eec5099601b71b706ef7037b46bd57a095d4e1495e98dc8c24eb9a"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cb726ce961d23ae60882e0a211227ac3c794092dd8e1bd2af280b228c825ed7"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ad50a37d6eb10bc1b4336bf7709fe35d4a04702709bc5d8dd235ccc2e8f7cbf"}
{"level":"info","ts":"2026-07-15T08:48:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/045d3d3339bbe9702757b7b77765b529e034e0847f7332f6ae710026252fe7c6"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb5e6ffd3f0a1579af4d8438b52c42cdf1daa6d538a0c89055f54a9deb2d5448"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/143b18b07d57071fd681fad0e78865c74901dadd4b8bc30cb8eba7305ae7423d"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c38f7386ea56c24dfb52b9cba241d524552e70395a0e7d596724994f0e47381"}
{"level":"info","ts":"2026-07-15T08:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2dbfeb82a3ba0e626285a43ca37c8745006b6e995c7613230137ba46290e963"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a39453b8cd61957b477baeca984e5d6e54cd71b7c2573c915a59bea9c11afd"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04ed2e598012d6932c068b0a9b754cd31761094158085ea750a55b520d4977fe"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f9c1ac7153dd717fb4df2521fb53d247d6b8332dedc97733207c01e8f78897"}
{"level":"info","ts":"2026-07-15T08:48:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbe61d58e9ade9909f13be1e1054f5096d55900e5957bdb610f982419e574ad7"}