{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"error","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"info","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:19:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"debug","ts":"2026-07-07T18:19:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81907dd9e26c67101bf7d6c58b5f8700f4987d83fd217de8b82f94e66d25c025","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81907dd9e26c67101bf7d6c58b5f8700f4987d83fd217de8b82f94e66d25c025"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bb113c321c4dea89802067f820c124fd1ca8398f4d77d3100642aee931ed42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bb113c321c4dea89802067f820c124fd1ca8398f4d77d3100642aee931ed42"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91584452470cf97da49404f569b9aa36d20487e81de5f48a70fa0cc8cce68947","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91584452470cf97da49404f569b9aa36d20487e81de5f48a70fa0cc8cce68947"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6a69165a622d55e80149a99fc7bd79586c8253fde4d5aed88dd88d1cd29bdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6a69165a622d55e80149a99fc7bd79586c8253fde4d5aed88dd88d1cd29bdd"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaf0faa3fa166eeef32096be29156e0fc3e71356e8a6d2b3643ee06a592bb676","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaf0faa3fa166eeef32096be29156e0fc3e71356e8a6d2b3643ee06a592bb676"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26"}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf44235a0068ba8cb67db449a90da7dd03fee192434b46844dce9c16b0493d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f173df26e6e7c59dd827db29aeb8f0d41ba5100dfd6405e93fafb266c0dac22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:19:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf44235a0068ba8cb67db449a90da7dd03fee192434b46844dce9c16b0493d0"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f173df26e6e7c59dd827db29aeb8f0d41ba5100dfd6405e93fafb266c0dac22"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"info","ts":"2026-07-07T18:19:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26"}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"250700ac214a1c617387311f89b385b744fe42fdc66b39fc94138a8bc5242ef9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/250700ac214a1c617387311f89b385b744fe42fdc66b39fc94138a8bc5242ef9"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37898","PortSpecifier":{"PortValue":37898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37898","PortSpecifier":{"PortValue":37898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448406,"nanos":866377880},"http":{"id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"]}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0bf44235a0068ba8cb67db449a90da7dd03fee192434b46844dce9c16b0493d0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"158e9425-85c3-4f4d-8a92-37f5b1374d96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38220","PortSpecifier":{"PortValue":38220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae10178c-4b3b-400e-a02a-1c67176f734e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38220","PortSpecifier":{"PortValue":38220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448406,"nanos":909935025},"http":{"id":"ae10178c-4b3b-400e-a02a-1c67176f734e","method":"POST","headers":{":authority":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"]}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae10178c-4b3b-400e-a02a-1c67176f734e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37912","PortSpecifier":{"PortValue":37912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37912","PortSpecifier":{"PortValue":37912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448406,"nanos":952948991},"http":{"id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF\"}"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","subscription":"e2e-rate-iso-a-2e2c5c","tenant":"e2e-shared-a-21f62c","userId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-2e2c5c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e2c5c"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","selected_subscription":"e2e-rate-iso-a-2e2c5c","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-2e2c5c@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeaba3da-7235-4b2f-b16a-b644c88d5fd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448408,"nanos":23105595},"http":{"id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF\"}"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","subscription":"e2e-rate-iso-a-2e2c5c","tenant":"e2e-shared-a-21f62c","userId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-2e2c5c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e2c5c"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","selected_subscription":"e2e-rate-iso-a-2e2c5c","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-2e2c5c@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed8e540d-922b-473d-89ed-7a6dbeef25b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49706","PortSpecifier":{"PortValue":49706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49706","PortSpecifier":{"PortValue":49706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448409,"nanos":59083932},"http":{"id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BQIv8NMORDZxINuw_wLMhu55RSrEy7Li4AlxqkWoQBiWNrRq2Nv8PzJI0zF\"}"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","subscription":"e2e-rate-iso-a-2e2c5c","tenant":"e2e-shared-a-21f62c","userId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-2e2c5c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e2c5c"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"301431d1-bc33-49cf-b6b0-ca2e4d73e7f2","keyName":"e2e-rate-a-2e2c5c","selected_subscription":"e2e-rate-iso-a-2e2c5c","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-2e2c5c@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e2c5c","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c9d4d09-65ce-46d8-99a1-ce73732ccfed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448419,"nanos":899679261},"http":{"id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"]}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0bf44235a0068ba8cb67db449a90da7dd03fee192434b46844dce9c16b0493d0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d3b9a77-e875-46ee-95a2-1baaa14834d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49634","PortSpecifier":{"PortValue":49634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"778829ed-7019-44ca-ae4a-22c23dcaf958","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49634","PortSpecifier":{"PortValue":49634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448419,"nanos":944258078},"http":{"id":"778829ed-7019-44ca-ae4a-22c23dcaf958","method":"POST","headers":{":authority":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"]}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c4d1e0080aa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d3faaf63-f8e4-4374-a250-af8662e3f9a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11313e45-3a1a-4a69-98ec-cff02ff65248","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"778829ed-7019-44ca-ae4a-22c23dcaf958","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39686","PortSpecifier":{"PortValue":39686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39686","PortSpecifier":{"PortValue":39686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448419,"nanos":982709256},"http":{"id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l\"}"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","subscription":"e2e-rate-iso-a-dc933a","tenant":"e2e-shared-a-21f62c","userId":"a66a7151-d66d-44c6-b703-33789440370c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-dc933a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dc933a"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","selected_subscription":"e2e-rate-iso-a-dc933a","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-dc933a@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e11a5a-49dc-442c-9fa0-7bd003733dba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39702","PortSpecifier":{"PortValue":39702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39702","PortSpecifier":{"PortValue":39702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448421,"nanos":17126711},"http":{"id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l\"}"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","subscription":"e2e-rate-iso-a-dc933a","tenant":"e2e-shared-a-21f62c","userId":"a66a7151-d66d-44c6-b703-33789440370c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-dc933a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dc933a"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","selected_subscription":"e2e-rate-iso-a-dc933a","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-dc933a@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf4d6e6c-1a82-4400-ae68-f2f74c93b362","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39712","PortSpecifier":{"PortValue":39712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71df3767-8df7-43be-b9cc-c40addbaafa8","method":"POST","path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions","host":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39712","PortSpecifier":{"PortValue":39712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448422,"nanos":54243784},"http":{"id":"71df3767-8df7-43be-b9cc-c40addbaafa8","method":"POST","headers":{":authority":"e2e-shared-a-21f62c.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PbqvCeP9KvZagXHi_BFFiwWQT8NezElJFR2kyQzKvrAbPup7FsQnybnb5G9l\"}"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","subscription":"e2e-rate-iso-a-dc933a","tenant":"e2e-shared-a-21f62c","userId":"a66a7151-d66d-44c6-b703-33789440370c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\",\"requestedSubscription\":\"e2e-rate-iso-a-dc933a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21f62c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dc933a"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a66a7151-d66d-44c6-b703-33789440370c","keyName":"e2e-rate-a-dc933a","selected_subscription":"e2e-rate-iso-a-dc933a","selected_subscription_key":"ai-tenant-e2e-shared-a-21f62c/e2e-rate-iso-a-dc933a@ai-tenant-e2e-shared-a-21f62c/rate-test-model-21f62c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21f62c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dc933a","namespace":"ai-tenant-e2e-shared-a-21f62c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71df3767-8df7-43be-b9cc-c40addbaafa8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49644","PortSpecifier":{"PortValue":49644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","method":"POST","path":"/ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388/v1/completions","host":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49644","PortSpecifier":{"PortValue":49644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448422,"nanos":89401803},"http":{"id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","method":"POST","headers":{":authority":"e2e-shared-b-fad388.apps.45d6d65c-9c60-4b71-8d6c-1c4d1e0080aa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrQVMZYRcKd6WATE_c0LK1cwxuKeUUXjocEUdeop9OTGy3ziE1nBBKZA9bef"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fad388.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrQVMZYRcKd6WATE_c0LK1cwxuKeUUXjocEUdeop9OTGy3ziE1nBBKZA9bef\"}"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fad388.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa457187-3048-4105-813c-ad4d2e62ee82","keyName":"e2e-rate-b-dc933a","subscription":"e2e-rate-iso-b-dc933a","tenant":"e2e-shared-b-fad388","userId":"aa457187-3048-4105-813c-ad4d2e62ee82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fad388.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388\",\"requestedSubscription\":\"e2e-rate-iso-b-dc933a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fad388.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fad388","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dc933a","namespace":"ai-tenant-e2e-shared-b-fad388","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dc933a"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa457187-3048-4105-813c-ad4d2e62ee82","keyName":"e2e-rate-b-dc933a","selected_subscription":"e2e-rate-iso-b-dc933a","selected_subscription_key":"ai-tenant-e2e-shared-b-fad388/e2e-rate-iso-b-dc933a@ai-tenant-e2e-shared-b-fad388/rate-test-model-fad388","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fad388","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dc933a","namespace":"ai-tenant-e2e-shared-b-fad388","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:20:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7992dbe-94b7-4238-98f5-7c90ccf4cbb7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f173df26e6e7c59dd827db29aeb8f0d41ba5100dfd6405e93fafb266c0dac22"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed806ce70371d632ed9c25012cdbdb36ce344ab5c4c108f8e0cc2a54adabd26"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bc4185f31a835bc75864df683b851374893f23fbbfd9812837c46bdc1b5894a"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85bb113c321c4dea89802067f820c124fd1ca8398f4d77d3100642aee931ed42"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaf0faa3fa166eeef32096be29156e0fc3e71356e8a6d2b3643ee06a592bb676"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81907dd9e26c67101bf7d6c58b5f8700f4987d83fd217de8b82f94e66d25c025"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4805ccf6169d50298a191c0baaec0a43c24260721510361c8686f09e99be710"}
{"level":"info","ts":"2026-07-07T18:20:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91584452470cf97da49404f569b9aa36d20487e81de5f48a70fa0cc8cce68947"}
{"level":"info","ts":"2026-07-07T18:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457efad849ec105e60393b88a7f52d7ad612449a528da4cfb6c50db033e45c07"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dc71289d12ac36237fa9283635383d589b1506e25ac6f72bfd5635eee72880f"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04fca8c1cce178fa2b8a189fb048afb7b1dd893fa95fff584fd73f83af92167a"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df4fe2ae3539ea10466f3b377ff476ab3e0222988dd0e1d037a91cc4f9d37841"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6616598c153d1dbe7c8ce33c26626b7538bb3828b8ba8a3be197c10e835206a9"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810a24ba8a7196816dc507e6f44276fe901e2079a3e4178cb908a74b0b9c41b9"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd2a3f9d183eafcc88a1d2a2969c2c54e2b705910bed7fa5e5447c388900f67b"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6a69165a622d55e80149a99fc7bd79586c8253fde4d5aed88dd88d1cd29bdd"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fceb3915a21416ce68a95ce64ad467f930172b787e6843377a96b3bf551f196"}
{"level":"info","ts":"2026-07-07T18:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf44235a0068ba8cb67db449a90da7dd03fee192434b46844dce9c16b0493d0"}
{"level":"info","ts":"2026-07-07T18:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/250700ac214a1c617387311f89b385b744fe42fdc66b39fc94138a8bc5242ef9"}
{"level":"info","ts":"2026-07-07T18:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff6515cbd00966d62586e57ae684d643755a66faebeb6f48bb2008896d27ec66"}