{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf"}
{"level":"info","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:22:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:22:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:23:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:23:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36500","PortSpecifier":{"PortValue":36500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c442b643-bb51-424d-a0f3-51cee7f819bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","object":"source:{address:{socket_address:{address:\"10.132.0.14:36500\"  port_value:36500}}}  destination:{address:{socket_address:{address:\"10.134.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785849791  nanos:876777121}  http:{id:\"c442b643-bb51-424d-a0f3-51cee7f819bd\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"c442b643-bb51-424d-a0f3-51cee7f819bd\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"92fe1f23c9afbed9861488a38fe2df1afa92932c5b6d791c20d2994ada7c76b0\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92fe1f23c9afbed9861488a38fe2df1afa92932c5b6d791c20d2994ada7c76b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c442b643-bb51-424d-a0f3-51cee7f819bd"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"c442b643-bb51-424d-a0f3-51cee7f819bd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":876777121,"seconds":1785849791}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36500},"address":"10.132.0.14:36500"}}}}},"destination":{"address":"10.134.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"92fe1f23c9afbed9861488a38fe2df1afa92932c5b6d791c20d2994ada7c76b0"},"headers":{":authority":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c442b643-bb51-424d-a0f3-51cee7f819bd"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"c442b643-bb51-424d-a0f3-51cee7f819bd","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":876777121,"seconds":1785849791},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:36500","port":36500}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c442b643-bb51-424d-a0f3-51cee7f819bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","object":"source:{address:{socket_address:{address:\"10.132.0.14:55466\"  port_value:55466}}}  destination:{address:{socket_address:{address:\"10.134.0.74:443\"  port_value:443}}}  request:{time:{seconds:1785849791  nanos:915172000}  http:{id:\"e37f7a5d-49fc-45bc-ba9f-c073305be171\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"e37f7a5d-49fc-45bc-ba9f-c073305be171\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"7b3bf27fd3d494bcbb086bd3cd25f25047baeee0f7a5a20db37e1ecf3789ff39\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b3bf27fd3d494bcbb086bd3cd25f25047baeee0f7a5a20db37e1ecf3789ff39"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e37f7a5d-49fc-45bc-ba9f-c073305be171"},"host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":915172000,"seconds":1785849791}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55466},"address":"10.132.0.14:55466"}}}}},"destination":{"address":"10.134.0.74:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7b3bf27fd3d494bcbb086bd3cd25f25047baeee0f7a5a20db37e1ecf3789ff39"},"headers":{":authority":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e37f7a5d-49fc-45bc-ba9f-c073305be171"},"host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":915172000,"seconds":1785849791},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:55466","port":55466}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c1c995/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e37f7a5d-49fc-45bc-ba9f-c073305be171","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36506","PortSpecifier":{"PortValue":36506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","object":"source:{address:{socket_address:{address:\"10.132.0.14:36506\"  port_value:36506}}}  destination:{address:{socket_address:{address:\"10.134.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785849791  nanos:952942969}  http:{id:\"049164f4-9e02-4de2-9ff3-fc640c040fc9\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdC03YmJkZDlmNGQ4LWM3c3hzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"049164f4-9e02-4de2-9ff3-fc640c040fc9\"}  path:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"  host:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-113dBYt3UM3N1NHAk_ilq0EYEVCJGgb7ZvIZJSh1OFEPdAlOXwcas9uUqzDZC"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","subscription":"e2e-rate-iso-a-1464f1","tenant":"e2e-shared-a-6a00c1","userId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"049164f4-9e02-4de2-9ff3-fc640c040fc9"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":952942969,"seconds":1785849791}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36506},"address":"10.132.0.14:36506"}}}}},"destination":{"address":"10.134.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350"},"headers":{":authority":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdC03YmJkZDlmNGQ4LWM3c3hzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"049164f4-9e02-4de2-9ff3-fc640c040fc9"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":952942969,"seconds":1785849791},"url_path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:36506","port":36506}}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1464f1"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","selected_subscription":"e2e-rate-iso-a-1464f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a00c1/e2e-rate-iso-a-1464f1@ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049164f4-9e02-4de2-9ff3-fc640c040fc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36518","PortSpecifier":{"PortValue":36518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","object":"source:{address:{socket_address:{address:\"10.132.0.14:36518\"  port_value:36518}}}  destination:{address:{socket_address:{address:\"10.134.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785849792  nanos:994617743}  http:{id:\"9a15a13b-7e20-4cb6-b5cf-13d366584552\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"9a15a13b-7e20-4cb6-b5cf-13d366584552\"}  path:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"  host:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-113dBYt3UM3N1NHAk_ilq0EYEVCJGgb7ZvIZJSh1OFEPdAlOXwcas9uUqzDZC"}
{"level":"debug","ts":"2026-08-04T13:23:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","subscription":"e2e-rate-iso-a-1464f1","tenant":"e2e-shared-a-6a00c1","userId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9a15a13b-7e20-4cb6-b5cf-13d366584552"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":994617743,"seconds":1785849792}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36518},"address":"10.132.0.14:36518"}}}}},"destination":{"address":"10.134.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350"},"headers":{":authority":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9a15a13b-7e20-4cb6-b5cf-13d366584552"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":994617743,"seconds":1785849792},"url_path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:36518","port":36518}}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1464f1"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","selected_subscription":"e2e-rate-iso-a-1464f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a00c1/e2e-rate-iso-a-1464f1@ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a15a13b-7e20-4cb6-b5cf-13d366584552","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36520","PortSpecifier":{"PortValue":36520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","object":"source:{address:{socket_address:{address:\"10.132.0.14:36520\"  port_value:36520}}}  destination:{address:{socket_address:{address:\"10.134.0.72:443\"  port_value:443}}}  request:{time:{seconds:1785849794  nanos:34432072}  http:{id:\"53f06cd6-ffba-4c81-8715-c7bd3f6264d8\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"53f06cd6-ffba-4c81-8715-c7bd3f6264d8\"}  path:\"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions\"  host:\"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-113dBYt3UM3N1NHAk_ilq0EYEVCJGgb7ZvIZJSh1OFEPdAlOXwcas9uUqzDZC"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","subscription":"e2e-rate-iso-a-1464f1","tenant":"e2e-shared-a-6a00c1","userId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a00c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdC03YmJkZDlmNGQ4LWM3c3hzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTZhMDBjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS02YTAwYzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":34432072,"seconds":1785849794}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36520},"address":"10.132.0.14:36520"}}}}},"destination":{"address":"10.134.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350"},"headers":{":authority":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a00c1-kserve-workload-svc.ai-tenant-e2e-shared-a-6a00c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.72~e2e-shared-a-6a00c1-openshift-default-7bbdd9f4d8-c7sxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8"},"host":"e2e-shared-a-6a00c1.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","method":"POST","path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":34432072,"seconds":1785849794},"url_path":"/ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:36520","port":36520}}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1464f1"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab73aa1a-9211-4eab-83b4-ba5c0b06cc61","keyName":"e2e-rate-a-1464f1","selected_subscription":"e2e-rate-iso-a-1464f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a00c1/e2e-rate-iso-a-1464f1@ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a00c1/models/facebook/opt-125m","name":"rate-test-model-6a00c1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1464f1","namespace":"ai-tenant-e2e-shared-a-6a00c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a00c1/rate-test-model-6a00c1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53f06cd6-ffba-4c81-8715-c7bd3f6264d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55474","PortSpecifier":{"PortValue":55474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","method":"POST","path":"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions","host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","object":"source:{address:{socket_address:{address:\"10.132.0.14:55474\"  port_value:55474}}}  destination:{address:{socket_address:{address:\"10.134.0.74:443\"  port_value:443}}}  request:{time:{seconds:1785849794  nanos:71871056}  http:{id:\"119b0828-4579-4a7f-bb4e-82e62fd0f601\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-c1c995-kserve-workload-svc.ai-tenant-e2e-shared-b-c1c995.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"119b0828-4579-4a7f-bb4e-82e62fd0f601\"}  path:\"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions\"  host:\"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bpNjb7vGemG50XDb_KLgy8g7FpNK3JzPYqWeJq0Jm5SzzH6lE8CvJc6CdYKd"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97178c35-5759-400e-9f34-78a6fefb0487","keyName":"e2e-rate-b-1464f1","subscription":"e2e-rate-iso-b-1464f1","tenant":"e2e-shared-b-c1c995","userId":"97178c35-5759-400e-9f34-78a6fefb0487","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c1c995.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c1c995/models/facebook/opt-125m","name":"rate-test-model-c1c995","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1464f1","namespace":"ai-tenant-e2e-shared-b-c1c995","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995"}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-c1c995-kserve-workload-svc.ai-tenant-e2e-shared-b-c1c995.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"119b0828-4579-4a7f-bb4e-82e62fd0f601"},"host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","method":"POST","path":"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":71871056,"seconds":1785849794}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55474},"address":"10.132.0.14:55474"}}}}},"destination":{"address":"10.134.0.74:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf"},"headers":{":authority":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-c1c995-kserve-workload-svc.ai-tenant-e2e-shared-b-c1c995.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1jMWM5OTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWMxYzk5NS1vcGVuc2hpZnQtZGVmYXVsdC01NTk4Y2I0NzY0LTh3dnhzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWMxYzk5NS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1jMWM5OTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.74~e2e-shared-b-c1c995-openshift-default-5598cb4764-8wvxs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"119b0828-4579-4a7f-bb4e-82e62fd0f601"},"host":"e2e-shared-b-c1c995.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","method":"POST","path":"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":71871056,"seconds":1785849794},"url_path":"/ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:55474","port":55474}}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c1c995/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1464f1"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97178c35-5759-400e-9f34-78a6fefb0487","keyName":"e2e-rate-b-1464f1","selected_subscription":"e2e-rate-iso-b-1464f1","selected_subscription_key":"ai-tenant-e2e-shared-b-c1c995/e2e-rate-iso-b-1464f1@ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c1c995/models/facebook/opt-125m","name":"rate-test-model-c1c995","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1464f1","namespace":"ai-tenant-e2e-shared-b-c1c995","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c1c995/rate-test-model-c1c995"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119b0828-4579-4a7f-bb4e-82e62fd0f601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93bc688c1957580a9c67b7bbe3f32ae2345a19447911887196e3466d2fd04ca0"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1efdf1ac16c0d2f5c02be89be5c81a1779588911afb5433a89e108a1987a6f30"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa2027293384f91c04f5105b0851996218609bf180899c15a2a295d9fa2eab30"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e78fa688584a83ab0c2ab2e653f4f7e9a2714898d484f894e4b0de26838df42d"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee457b91b2713421021c8ff607101af56591883b19b3795db85069684f384b58"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38b24d1b26090db4c78afbb3c26ae276d5de046d006c09939645c5261dd3ce88"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e85cc9cf079db41c818d764a7c723c5f1ba90e45d18d1ba3c6335833d91db926"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09244837194505b5b511d6973ffa986ff4290066d4e228733ee9daf8f14974d9"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92fe1f23c9afbed9861488a38fe2df1afa92932c5b6d791c20d2994ada7c76b0"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc0a72c23fc163e29587ce64d9e8d693d2a61c3e0cfdef5cf91528b0f5198327"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3793ca3b7797e0f3d0676d7f44d9c6eaafca9200c64572c811acb98d614ecf7a"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e613d2c668badfd9607d22d89f8bd697c4e6a59d749d2bebf5cd217169686cf8"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70584989b41a5dcad26240dc3b440f92959a605fb480b08dbf1a0e28c44f646f"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/797399723314532e6060d96d5e2587a18d264ee2d9c2e5a65c1cc401e15632ea"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7892a879569b65c35c3c336cd9a88ee549dc00ee2a40a080ca7ecdd26aea87cf"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d13c51af7d50df7a30cd2408addd485fd62662349bcdfc3a9f1379df889dfe4"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0b60fc7523fcb4d3d7030833f3f1974318ae4a816a3d93218c66043210bf482"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd7eb3ab6041a8d1cbb8a724189797bbef907982cbe6d948e649cf653a966a63"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbf227931daef203685460068042a2abb23efa07416c878bf9f38f3aac3455ff"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09def102d5084d090eef4c2ecc111ce09b575411dbf8ddbc894aaf7f897e7ca1"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ed736d0fba313ff956b659b026c8e52a1063145c32a74da4d43bc430a708350"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b3bf27fd3d494bcbb086bd3cd25f25047baeee0f7a5a20db37e1ecf3789ff39"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20333eb2cbdc83eeb9d5c8620016bf1fe78386ec9297933913b70f4c87be8d55"}
{"level":"info","ts":"2026-08-04T13:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b10d488bb069876eb95628ed561b21f3faccbae6265d7d17a43917e435dda808"}
{"level":"info","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374aac6b-3386-4c47-87d0-12334f61700a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34642","PortSpecifier":{"PortValue":34642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"374aac6b-3386-4c47-87d0-12334f61700a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374aac6b-3386-4c47-87d0-12334f61700a","object":"source:{address:{socket_address:{address:\"10.132.0.14:34642\"  port_value:34642}}}  destination:{address:{socket_address:{address:\"10.133.0.34:443\"  port_value:443}}}  request:{time:{seconds:1785849878  nanos:530652862}  http:{id:\"374aac6b-3386-4c47-87d0-12334f61700a\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"374aac6b-3386-4c47-87d0-12334f61700a\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"374aac6b-3386-4c47-87d0-12334f61700a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"374aac6b-3386-4c47-87d0-12334f61700a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"374aac6b-3386-4c47-87d0-12334f61700a"},"host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"374aac6b-3386-4c47-87d0-12334f61700a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":530652862,"seconds":1785849878}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34642},"address":"10.132.0.14:34642"}}}}},"destination":{"address":"10.133.0.34:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LW5manp6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"374aac6b-3386-4c47-87d0-12334f61700a"},"host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"374aac6b-3386-4c47-87d0-12334f61700a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":530652862,"seconds":1785849878},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:34642","port":34642}}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374aac6b-3386-4c47-87d0-12334f61700a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374aac6b-3386-4c47-87d0-12334f61700a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374aac6b-3386-4c47-87d0-12334f61700a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34654","PortSpecifier":{"PortValue":34654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","object":"source:{address:{socket_address:{address:\"10.132.0.14:34654\"  port_value:34654}}}  destination:{address:{socket_address:{address:\"10.133.0.34:443\"  port_value:443}}}  request:{time:{seconds:1785849878  nanos:583571171}  http:{id:\"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V6FvdqzBQaGgF4gq_Mnyg132vEYmKwgg7ceKZ8SlTj7QqJVZ1ZJeUsr2DR82"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"417c2e37-7da5-425b-9e71-c01759234d7c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"417c2e37-7da5-425b-9e71-c01759234d7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41"},"host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":583571171,"seconds":1785849878}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34654},"address":"10.132.0.14:34654"}}}}},"destination":{"address":"10.133.0.34:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.34~maas-default-gateway-openshift-default-78bb78ff78-nfjzz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41"},"host":"maas.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":583571171,"seconds":1785849878},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:34654","port":34654}}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"417c2e37-7da5-425b-9e71-c01759234d7c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a3940c-fd3c-4b98-a8c4-f0cdbff92c41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8"}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8"}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8"}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"}
{"level":"info","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"}
{"level":"error","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4"}
{"level":"error","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T13:25:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T13:25:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"error","ts":"2026-08-04T13:25:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T13:25:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T13:25:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36550","PortSpecifier":{"PortValue":36550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","object":"source:{address:{socket_address:{address:\"10.132.0.14:36550\"  port_value:36550}}}  destination:{address:{socket_address:{address:\"10.133.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785849926  nanos:397704495}  http:{id:\"326be2c7-beb4-4f91-a1ab-52ab7a79e89d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"326be2c7-beb4-4f91-a1ab-52ab7a79e89d\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/898cd7965edd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=58a2588b-ad1f-4a60-8c42-12fa28cd9459"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fabce6ac-f35d-47fd-9773-e084c507fc1f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d"},"host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":397704495,"seconds":1785849926}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36550},"address":"10.132.0.14:36550"}}}}},"destination":{"address":"10.133.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"},"headers":{":authority":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d"},"host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":397704495,"seconds":1785849926},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:36550","port":36550}}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2ef922/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"326be2c7-beb4-4f91-a1ab-52ab7a79e89d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","method":"POST","path":"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions","host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","object":"source:{address:{socket_address:{address:\"10.132.0.14:50136\"  port_value:50136}}}  destination:{address:{socket_address:{address:\"10.133.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785849928  nanos:462668465}  http:{id:\"df9754d8-8840-42a0-8ca2-2d8163e69b79\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-2ef922-kserve-workload-svc.ai-tenant-e2e-ipp-a-2ef922.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"df9754d8-8840-42a0-8ca2-2d8163e69b79\"}  path:\"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions\"  host:\"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GWaXFkLKpOFhZpZS_Tev14mbkpXJHMcRVigl78uHh2wX4j6qHSPuIF8v3195"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6bf4a70d-a858-4c22-829f-f23b4925c2c7","keyName":"e2e-ipp-2ef922","subscription":"ipp-route-2ef922-sub","tenant":"e2e-ipp-a-2ef922","userId":"6bf4a70d-a858-4c22-829f-f23b4925c2c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2ef922.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2ef922/models/facebook/opt-125m","name":"ipp-route-2ef922","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2ef922-sub","namespace":"ai-tenant-e2e-ipp-a-2ef922","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922"}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2ef922-kserve-workload-svc.ai-tenant-e2e-ipp-a-2ef922.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"df9754d8-8840-42a0-8ca2-2d8163e69b79"},"host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","method":"POST","path":"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":462668465,"seconds":1785849928}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50136},"address":"10.132.0.14:50136"}}}}},"destination":{"address":"10.133.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"},"headers":{":authority":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2ef922-kserve-workload-svc.ai-tenant-e2e-ipp-a-2ef922.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.67~e2e-ipp-a-2ef922-openshift-default-77bd479c4b-phjxh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"df9754d8-8840-42a0-8ca2-2d8163e69b79"},"host":"e2e-ipp-a-2ef922.apps.c74da73f-df76-49fb-bc38-898cd7965edd.prod.konfluxeaas.com","id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","method":"POST","path":"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":462668465,"seconds":1785849928},"url_path":"/ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:50136","port":50136}}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2ef922/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-2ef922-sub"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6bf4a70d-a858-4c22-829f-f23b4925c2c7","keyName":"e2e-ipp-2ef922","selected_subscription":"ipp-route-2ef922-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922-sub@ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2ef922/models/facebook/opt-125m","name":"ipp-route-2ef922","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2ef922-sub","namespace":"ai-tenant-e2e-ipp-a-2ef922","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2ef922/ipp-route-2ef922"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T13:25:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9754d8-8840-42a0-8ca2-2d8163e69b79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4ccdd06cb84a03c34f1877dd70236f3ffef420da90cba9884b3305a0acf330c"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46066ccfcd06e325445be1d2e295fb4c1231ea6c861e029da17caea453b0976f"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/795a6daac4dfc911b4620d669299bdb9cf7b67e93c617be49c9170e885bfbdb9"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72b9eee12404edb19c7b83f0800c2e839135a6c53be66ceba0ff86d4cec9cda8"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42d29cf360acd425c73b91a9fa8521a032c6e376a7082abd5949d7e6ded2c3da"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be41fc40bd5f172f267bf06eba6b5ced8fe8cafbe058043b2159b560cf76ba51"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea688ad80c955a74eefbd4f213d47232cc257c1baefcf00802c0ffcf24ff0b4"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ec154ceea1503839a75f75ba25e889ef7e936c4b48a8c48b5ea3547533e9cc"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2440f2235647d3f52b5f2463f3491bdd1ad581902e83137399e59571396bf66"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e6755e10409ba3debff72f4fe717c6c797be8de3623c6ceaff6484fff6b94f4"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3554614230d704cf80045bcaa7e0fb37e5b0c6ea252fa48767a5c7c8d1d6bb2f"}
{"level":"info","ts":"2026-08-04T13:26:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2843dd546de15ad55f2a749fab168cc80bf1c95d22c57bb8efa52bf0bc014113"}