{"level":"info","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32252bcdff09100e3d86a5a845b90daf85adf4b506855b8b6effc6b4c951b9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32252bcdff09100e3d86a5a845b90daf85adf4b506855b8b6effc6b4c951b9c2"}
{"level":"info","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e021a409dc96442d79bc21d979e1950146e55050b3c8eb54c5ef4423deec34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7894d6d2c0e82fb8e7bed3ac9f43d4ecdd88989b9170dd15f49f0cd60f7a5cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32252bcdff09100e3d86a5a845b90daf85adf4b506855b8b6effc6b4c951b9c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2158c3587c0d0ee807bb6a2945abc615ef634719579ab679741af2980cd98e04"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7894d6d2c0e82fb8e7bed3ac9f43d4ecdd88989b9170dd15f49f0cd60f7a5cfc"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/041b8dd0861e7d61992d0eff1e933e543bef16d6d0f2ca74baeacf9ca2c6de7b"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abcd720862d9d178f3b675280e5c53d7aae9950c24c6d8b7e01cdd6b138bd23b"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/284fef6976d45156de403a1aaacdcdbb4e99befb3077f65add95388f1975e6f0"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d30a51698023ef30b917f15827fba33a8c8c2eaf03d7e480aef8716a76b3bae"}
{"level":"info","ts":"2026-07-23T04:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e9ce96635409af69b060168dd4270681efffed6b4eb91c46da115e4e1563de1"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5d9f9fe43daec08b029d390b7866ab32166fefd9373ce5e264642c0de11a768"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/294db67245c05de5e2bd2eb0c178934758dae19248bd841c26776b783a9bfca6"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e021a409dc96442d79bc21d979e1950146e55050b3c8eb54c5ef4423deec34"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e85aaa22f9b461e5b6fd269f5badb10fe55f77079a7551f107037b384e01e4b"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32252bcdff09100e3d86a5a845b90daf85adf4b506855b8b6effc6b4c951b9c2"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3518879eabfc0fcc5dfb6db019f65b0d9986b2533ec10522beefce61ac5a6ec3"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a793f06e64c6e3c01a5f52e40934a9b02f5fee6eb9d1373f02f343f3f882f536"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3287edb1ca1a24480220f13883f440d9b18c4724fdc86050e5a05e13e1130da9"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d47db34d288d29f5f1eba13384549e276a28dc14f68f77a3689e836608e8b4d2"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad"}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad"}
{"level":"error","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"}
{"level":"error","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"}
{"level":"error","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d"}
{"level":"info","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T04:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T04:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c"}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55124","PortSpecifier":{"PortValue":55124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55124","PortSpecifier":{"PortValue":55124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781554,"nanos":814223081},"http":{"id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"da886ec0-84ee-4751-909d-9e91292f6737","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"]}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da886ec0-84ee-4751-909d-9e91292f6737","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a24644c-9724-46c2-be54-9fa30bbad1fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57522","PortSpecifier":{"PortValue":57522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57522","PortSpecifier":{"PortValue":57522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781554,"nanos":857195883},"http":{"id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","method":"POST","headers":{":authority":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"da886ec0-84ee-4751-909d-9e91292f6737","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"]}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da886ec0-84ee-4751-909d-9e91292f6737","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ab39e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac4d58c-fd7d-42de-949e-1c7b82971b0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781554,"nanos":899207273},"http":{"id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql\"}"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","subscription":"e2e-rate-iso-a-793119","tenant":"e2e-shared-a-5fa859","userId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-793119\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-793119"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","selected_subscription":"e2e-rate-iso-a-793119","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-793119@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ccc844-7c60-4ffe-8edc-9deaad4479c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55148","PortSpecifier":{"PortValue":55148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55148","PortSpecifier":{"PortValue":55148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781555,"nanos":957494851},"http":{"id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql\"}"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","subscription":"e2e-rate-iso-a-793119","tenant":"e2e-shared-a-5fa859","userId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-793119\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-793119"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","selected_subscription":"e2e-rate-iso-a-793119","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-793119@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2042b9-0eb8-41af-bcd3-f478b20d2f18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55158","PortSpecifier":{"PortValue":55158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55158","PortSpecifier":{"PortValue":55158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781556,"nanos":998001576},"http":{"id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JPIG3LcvlbSJuDnh_QKvu24tKwPhrPGFHAu5frKbKbqHdYSwjtywVpfcvdql\"}"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","subscription":"e2e-rate-iso-a-793119","tenant":"e2e-shared-a-5fa859","userId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-793119\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-793119"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5b20ca4-b006-49a4-a1f6-0bb26da14aa2","keyName":"e2e-rate-a-793119","selected_subscription":"e2e-rate-iso-a-793119","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-793119@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-793119","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a79f79f3-8648-49c3-b9ce-a2730348cbff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85111417-6e0e-4c13-b434-71744365a428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85111417-6e0e-4c13-b434-71744365a428","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85111417-6e0e-4c13-b434-71744365a428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53868","PortSpecifier":{"PortValue":53868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781569,"nanos":920179687},"http":{"id":"85111417-6e0e-4c13-b434-71744365a428","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85111417-6e0e-4c13-b434-71744365a428","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"da886ec0-84ee-4751-909d-9e91292f6737","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"]}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85111417-6e0e-4c13-b434-71744365a428","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da886ec0-84ee-4751-909d-9e91292f6737","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85111417-6e0e-4c13-b434-71744365a428","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85111417-6e0e-4c13-b434-71744365a428","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85111417-6e0e-4c13-b434-71744365a428","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48622","PortSpecifier":{"PortValue":48622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48622","PortSpecifier":{"PortValue":48622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781569,"nanos":967306093},"http":{"id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","method":"POST","headers":{":authority":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"da886ec0-84ee-4751-909d-9e91292f6737","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"]}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c61d4d7b5702"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06fc19e3-f94e-455c-a938-ed4c913b25c4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"da886ec0-84ee-4751-909d-9e91292f6737","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ab39e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5aaadeac-b220-4218-beed-8da0c11a0dd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53878","PortSpecifier":{"PortValue":53878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781569,"nanos":999406592},"http":{"id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc\"}"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","subscription":"e2e-rate-iso-a-1aabe4","tenant":"e2e-shared-a-5fa859","userId":"d021e296-7e2d-4a33-9aea-88aa80674202","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-1aabe4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1aabe4"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","selected_subscription":"e2e-rate-iso-a-1aabe4","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-1aabe4@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e658b37d-0acf-4719-b52b-cc33dcba4cc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53888","PortSpecifier":{"PortValue":53888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53888","PortSpecifier":{"PortValue":53888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781571,"nanos":40419073},"http":{"id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc\"}"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","subscription":"e2e-rate-iso-a-1aabe4","tenant":"e2e-shared-a-5fa859","userId":"d021e296-7e2d-4a33-9aea-88aa80674202","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-1aabe4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1aabe4"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","selected_subscription":"e2e-rate-iso-a-1aabe4","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-1aabe4@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b6b7a19-3d01-465d-98f1-3ff00351b9b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53896","PortSpecifier":{"PortValue":53896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d33f932-57bb-4338-8582-cc8897fc23ee","method":"POST","path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions","host":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53896","PortSpecifier":{"PortValue":53896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781572,"nanos":77320193},"http":{"id":"1d33f932-57bb-4338-8582-cc8897fc23ee","method":"POST","headers":{":authority":"e2e-shared-a-5fa859.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O8asr4SGOmPY1ZIF_b1HT2horq3Tn0MGqOwc5J4Vf64WwyFSBhoTldub2Fjc\"}"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","subscription":"e2e-rate-iso-a-1aabe4","tenant":"e2e-shared-a-5fa859","userId":"d021e296-7e2d-4a33-9aea-88aa80674202","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\",\"requestedSubscription\":\"e2e-rate-iso-a-1aabe4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5fa859.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5fa859/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1aabe4"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d021e296-7e2d-4a33-9aea-88aa80674202","keyName":"e2e-rate-a-1aabe4","selected_subscription":"e2e-rate-iso-a-1aabe4","selected_subscription_key":"ai-tenant-e2e-shared-a-5fa859/e2e-rate-iso-a-1aabe4@ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5fa859","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1aabe4","namespace":"ai-tenant-e2e-shared-a-5fa859","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5fa859/rate-test-model-5fa859"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d33f932-57bb-4338-8582-cc8897fc23ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48636","PortSpecifier":{"PortValue":48636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","method":"POST","path":"/ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0/v1/completions","host":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48636","PortSpecifier":{"PortValue":48636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784781572,"nanos":120359390},"http":{"id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","method":"POST","headers":{":authority":"e2e-shared-b-ab39e0.apps.0ed20cdb-8734-43c1-8b70-c61d4d7b5702.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HrCJJvCG2YtE8za5_49ge5Hc7M3GRx0xpbQnEPx4BVWnAKZGvKJCpNSP0mkC"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ab39e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HrCJJvCG2YtE8za5_49ge5Hc7M3GRx0xpbQnEPx4BVWnAKZGvKJCpNSP0mkC\"}"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ab39e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e723608c-6e69-48e2-978a-fc13a945fb16","keyName":"e2e-rate-b-1aabe4","subscription":"e2e-rate-iso-b-1aabe4","tenant":"e2e-shared-b-ab39e0","userId":"e723608c-6e69-48e2-978a-fc13a945fb16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ab39e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0\",\"requestedSubscription\":\"e2e-rate-iso-b-1aabe4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ab39e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ab39e0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1aabe4","namespace":"ai-tenant-e2e-shared-b-ab39e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0"}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ab39e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1aabe4"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e723608c-6e69-48e2-978a-fc13a945fb16","keyName":"e2e-rate-b-1aabe4","selected_subscription":"e2e-rate-iso-b-1aabe4","selected_subscription_key":"ai-tenant-e2e-shared-b-ab39e0/e2e-rate-iso-b-1aabe4@ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ab39e0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1aabe4","namespace":"ai-tenant-e2e-shared-b-ab39e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ab39e0/rate-test-model-ab39e0"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T04:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e5b4ac-2d54-4663-9620-d3dd1ae9cd3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d730b7f8ca4f2c784bfd9479cd2db8531468d24cf26ad91869683aa213497b7d"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d99662974366a5037a58b36f684d4675d0faf4734864349e4d50a5ba623ac7d"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55f132a3d9cc92372b2d38442be6cf7d3deb65b592b5b9127580134d0a66062f"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6951875a77d1bd9baefdc95ac383f9bd5cab0b92af18e485b7dc3b032d6cad"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87c39653a312ed621d38a83d95fc1e794c6c5108f135678fc786baac9f7b71d1"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7a6207a50f7e9bcbacf25a707a3af6822a02f911f10a111f1111028ce14446"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22fe72769b34add66944f2aab7cf8d5c21fe691288a33752790a18ec9203c3c1"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3a3e0638a25f3e685817e8dc12aa46f97210d285ae91dbe50caa2b61cc69b14"}
{"level":"info","ts":"2026-07-23T04:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/497c25874c0d2fe239a54826b5bcfff185fe74c2f16efbd800c1b8251971331e"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29c12ae51e0f90fb52b3ec80ba7d1a0a1835ee9774b97aeb6967a5a25aa1614d"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ecc4632ad510b3248fecf2d0a80275d9823d8913d3564c519c52464c766504c"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3ed9fad5c5932339bea3adac0cc0ef9f90f82573f3141709234b491c511cc95"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd006d4e97350247aea78df833dfa62036df7d37668adc03bf076e3b8dfd53db"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3dc883eedbbd3b6f64911d53c05dbc3a6c38f51582cb552261d33e6452b9c12"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcbbcc0cea322f955ecf06dde3f7b20a25fa1299336ac23c8208369617615310"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0837a62670b86de0e7726822ba9de764c53a76217ce6f148df42650c491dc670"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9ac6e4d1c151715fce42ad7ca534492b6f449e766763893b2b69fad29b45ec4"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df071a6c82b604a20585613552b01d20402998944e587e2eff55a26d7d251cf9"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e3c97ea72ca03f536283a273ccf832559a6674bcc7677d75244ff8ef4d6130"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/327c4b8d263437a27c90296499a73a0024b4f245cfb213bfae23e088a2568a4c"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a778f95b9b0a8b9ae423cc7c45423136afa3b4705f386d3ef72a6636e50b78d"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa69d94b7e854eaae49c87eb1bfb0dfdef2cedb51994d1d3588942a24c356853"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ad9eca00b8ca26918b0efea7a1bdbe0f1ea99eec94512bc0d32add99f359abd"}
{"level":"info","ts":"2026-07-23T04:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d935dcb7b90bfa490378fc890f256e58a551b5d482eae5dbed56135f951aa9c"}